FF
Product
FFmpeg
526
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 30High 141Medium 143Low 3
Watch
Add FFmpeg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-51796 | 3.6 | Apr 19 | Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/f_reverse.c:269:26 in areverse_request_frame Affected: 7.0; 7.0.1; 7.0.2; 7.0.3; 7.1; 7.1; +7 more |
| CVE-2026-107676 | 3.3 | Oct 8 | FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer Affected: through 9.0.2 |
| CVE-2026-52295 | 2.9 | Sep 1 | FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c Affected: before 9.0 |
Showing 3
The 500 most important CVEs for this product (exploited first, then by severity)