FF
Product
FFmpeg
533
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 30High 145Medium 146Low 3
Watch
Add FFmpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-7555 | 5.5 | Dec 23 | The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure Affected: through 3.1.3 |
| CVE-2016-7122 | 5.5 | Dec 23 | The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decodes an AVI file that has a crafted 'nctg' structure Affected: through 3.1.3 |
| CVE-2016-6881 | 5.5 | Dec 23 | The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file Affected: through 3.1.2 |
| CVE-2016-1898 | 5.5 | Jan 15 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2016-1897 | 5.5 | Jan 15 | FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more |
| CVE-2026-107698 | 5.4 | Oct 8 | FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling Affected: before 7.1.4; 8.0 before 8.0.2 |
| CVE-2025-69693 | 5.4 | Mar 16 | Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c) Affected: 8.0; 8.0.1 |
| CVE-2024-55069 | 5.3 | May 2 | ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c Affected: 7.1 |
| CVE-2025-0518 | 5.3 | Jan 16 | Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable Affected: 7.1 |
| CVE-2023-6604 | 5.3 | Jan 6 | Ffmpeg: hls xbin demuxer dos amplification in ffmpeg Affected: 2.0 through 6.0 |
| CVE-2023-6602 | 5.3 | Dec 31 | Ffmpeg: improper handling of input format in tty demuxer of ffmpeg Affected: 2.0 through 6.0 |
| CVE-2024-36619 | 5.3 | Nov 29 | FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a… Affected: 6.1.1 |
| CVE-2024-31585 | 5.3 | Apr 17 | FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c Affected: 5.1 before 7.0 |
| CVE-2022-3341 | 5.3 | Jan 12 | A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file Affected: before 5.0.3 |
| CVE-2026-107660 | 4.8 | Oct 8 | FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts Affected: before 8.1.3; 9.0 before 9.0.2 |
| CVE-2026-107678 | 4.7 | Oct 8 | FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes Affected: through 9.0.2 |
| CVE-2026-107677 | 4.7 | Oct 8 | FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media Affected: through 9.0.2 |
| CVE-2023-6601 | 4.7 | Jan 6 | Ffmpeg: hls unsafe file extension bypass in ffmpeg Affected: 2.0 through 6.0 |
| CVE-2026-107697 | 4.3 | Oct 8 | FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist() Affected: before 8.1.3 |
| CVE-2026-90816 | 4.3 | Sep 14 | FFmpeg Duration hlsproto.c parse_playlist denial of service Affected: 8.0.* |
| CVE-2023-50007 | 4.0 | Apr 19 | FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the av_samples_set_silence function in thelibavutil/samplefmt.c:260:9 component Affected: 6.1 before 7.0 |
| CVE-2023-51796 | 3.6 | Apr 19 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26 in areverse_request_frame Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.1; 7.1; +7 more |
| CVE-2026-107676 | 3.3 | Oct 8 | FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer Affected: through 9.0.2 |
| CVE-2026-52295 | 2.9 | Sep 1 | FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c Affected: before 9.0 |
| CVE-2015-8365 | – | Nov 26 | The smka_decode_frame function in libavcodec/smacker.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not verify that the data size is consistent with… Affected: 2.6.4; 2.7.0; 2.7.1; 2.7.2; 2.8.0; 2.8.1; +1 more |
| CVE-2015-8364 | – | Nov 26 | Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 allows remote attackers to cause a… Affected: 2.6.4; 2.7.0; 2.7.1; 2.7.2; 2.8.0; 2.8.1; +1 more |
| CVE-2015-8363 | – | Nov 26 | The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c in FFmpeg before 2.6.5, 2.7.x before 2.7.3, and 2.8.x through 2.8.2 does not enforce uniqueness of the SIZ… Affected: 2.6.4; 2.7.0; 2.7.1; 2.7.2; 2.8.0; 2.8.1; +1 more |
| CVE-2015-8219 | – | Nov 17 | The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote… Affected: through 2.8.1 |
| CVE-2015-8218 | – | Nov 17 | The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service… Affected: through 2.8.1 |
| CVE-2015-8217 | – | Nov 17 | The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of… Affected: through 2.8.1 |
| CVE-2015-8216 | – | Nov 17 | The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of… Affected: through 2.8.1 |
| CVE-2015-6761 | – | Oct 15 | The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition… Affected: through 2.8.1 |
| CVE-2015-6826 | – | Sep 6 | The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers to cause a… Affected: through 2.7.1 |
| CVE-2015-6825 | – | Sep 6 | The ff_frame_thread_init function in libavcodec/pthread_frame.c in FFmpeg before 2.7.2 mishandles certain memory-allocation failures, which allows remote attackers to cause a… Affected: through 2.7.1 |
| CVE-2015-6824 | – | Sep 6 | The sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of… Affected: through 2.7.1 |
| CVE-2015-6823 | – | Sep 6 | The allocate_buffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a denial of service… Affected: through 2.7.1 |
| CVE-2015-6822 | – | Sep 6 | The destroy_buffers function in libavcodec/sanm.c in FFmpeg before 2.7.2 does not properly maintain height and width values in the video context, which allows remote attackers to… Affected: through 2.7.1 |
| CVE-2015-6821 | – | Sep 6 | The ff_mpv_common_init function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not properly maintain the encoding context, which allows remote attackers to cause a denial… Affected: through 2.7.1 |
| CVE-2015-6820 | – | Sep 6 | The ff_sbr_apply function in libavcodec/aacsbr.c in FFmpeg before 2.7.2 does not check for a matching AAC frame syntax element before proceeding with Spectral Band Replication… Affected: through 2.7.1 |
| CVE-2015-6819 | – | Sep 6 | Multiple integer underflows in the ff_mjpeg_decode_frame function in libavcodec/mjpegdec.c in FFmpeg before 2.7.2 allow remote attackers to cause a denial of service… Affected: through 2.7.1 |
| CVE-2015-6818 | – | Sep 6 | The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which allows remote… Affected: through 2.7.1 |
| CVE-2015-1872 | – | Jul 26 | The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment, which allows… Affected: through 2.5.3 |
| CVE-2015-3395 | – | Jun 16 | The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and… Affected: 2.0.6; 2.2.0; 2.2.1; 2.2.2; 2.2.3; 2.2.4; +26 more |
| CVE-2015-3417 | – | Apr 24 | Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have… Affected: through 2.3.5 |
| CVE-2014-9676 | – | Feb 28 | The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of… Affected: through 2.1.4 |
| CVE-2014-7937 | – | Jan 22 | Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service… Affected: through 2.4.1 |
| CVE-2014-7933 | – | Jan 22 | Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote… Affected: through 2.5.0 |
| CVE-2014-9604 | – | Jan 16 | libavcodec/utvideodec.c in FFmpeg before 2.5.2 does not check for a zero value of a slice height, which allows remote attackers to cause a denial of service (out-of-bounds array… Affected: through 2.5.1 |
| CVE-2014-9603 | – | Jan 16 | The vmd_decode function in libavcodec/vmdvideo.c in FFmpeg before 2.5.2 does not validate the relationship between a certain length value and the frame width, which allows remote… Affected: through 2.5.1 |
| CVE-2014-9602 | – | Jan 16 | libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote… Affected: through 2.5.1 |
The 500 most important CVEs for this product (exploited first, then by severity)