Login Request a demo
FF
Vendor
Ffmpeg
4 products with CVEs on record
529
CVEs
0
On KEV
9
New 30D
Products
FF
FFmpeg
Ffmpeg
9.8
526 CVEs0 on KEV9 new
LD
Lavf Demuxer
Ffmpeg
–
1 CVEs0 on KEV0 new
LI
Libavcodec
Ffmpeg
–
1 CVEs0 on KEV0 new
LI
Libswresample
Ffmpeg
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-107698
FF
FFmpeg
FFmpeg
5.4
0%
Oct 8FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling
CVE-2026-107697
FF
FFmpeg
FFmpeg
4.3
0%
Oct 8FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()
CVE-2026-107696
FF
FFmpeg
FFmpeg
6.5
0%
Oct 8FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c
CVE-2026-107695
FF
FFmpeg
FFmpeg
6.5
0%
Oct 8FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist
CVE-2026-107678
FF
FFmpeg
FFmpeg
4.7
0%
Oct 8FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes
CVE-2026-107677
FF
FFmpeg
FFmpeg
4.7
0%
Oct 8FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media
CVE-2026-107676
FF
FFmpeg
FFmpeg
3.3
0%
Oct 8FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer
CVE-2026-107675
FF
FFmpeg
FFmpeg
5.9
0%
Oct 8FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol
CVE-2026-107660
FF
FFmpeg
FFmpeg
4.8
0%
Oct 8FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts
CVE-2026-96611
FF
FFmpeg
FFmpeg
7.8
0%
Sep 23FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c
CVE-2026-90816
FF
FFmpeg
Ffmpeg
4.3
1%
Sep 14FFmpeg Duration hlsproto.c parse_playlist denial of service
CVE-2026-90815
FF
FFmpeg
Ffmpeg
6.3
0%
Sep 14FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds
CVE-2026-52297
FF
FFmpeg
FFmpeg
7.1
0%
Sep 13FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c
CVE-2026-52296
FF
FFmpeg
FFmpeg
7.1
0%
Sep 13FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c
CVE-2026-30754
FF
Ffmpeg
Ffmpeg
8.8
1%
Sep 8A memory corruption vulnerability exists in FFmpeg before 8.1
CVE-2026-52295
FF
FFmpeg
FFmpeg
2.9
0%
Sep 1FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c
CVE-2026-75147
FF
FFmpeg
FFmpeg
7.1
0%
Aug 19FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c
CVE-2026-75146
FF
FFmpeg
FFmpeg
8.1
0%
Aug 19FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c
CVE-2026-75145
FF
FFmpeg
FFmpeg
5.8
0%
Aug 19FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer
CVE-2026-75144
FF
FFmpeg
FFmpeg
7.8
0%
Aug 19FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer
CVE-2026-75143
FF
FFmpeg
FFmpeg
9.8
1%
Aug 19FFmpeg Heap Buffer Overflow via RIST Protocol Reader
CVE-2026-75142
FF
FFmpeg
FFmpeg
7.8
0%
Aug 19FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c
CVE-2026-75141
FF
FFmpeg
FFmpeg
7.8
0%
Aug 19FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing
CVE-2026-70632
FF
FFmpeg
FFmpeg
7.8
0%
Aug 6FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing
CVE-2026-70631
FF
FFmpeg
FFmpeg
5.5
0%
Aug 6FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder
CVE-2026-70630
FF
FFmpeg
FFmpeg
5.5
0%
Aug 6FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder
CVE-2026-70629
FF
FFmpeg
FFmpeg
5.5
0%
Aug 6FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder
CVE-2026-70628
FF
FFmpeg
FFmpeg
7.8
0%
Aug 6FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
CVE-2026-66041
FF
FFmpeg
FFmpeg
7.8
0%
Jul 24FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter
CVE-2026-66040
FF
FFmpeg
FFmpeg
8.8
1%
Jul 24FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
CVE-2026-66039
FF
FFmpeg
FFmpeg
7.8
0%
Jul 24FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
CVE-2026-66038
FF
FFmpeg
FFmpeg
6.5
0%
Jul 24FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c
CVE-2026-66037
FF
FFmpeg
FFmpeg
5.5
0%
Jul 24FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()
CVE-2026-66036
FF
FFmpeg
FFmpeg
8.8
0%
Jul 24FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter
CVE-2026-65706
FF
FFmpeg
FFmpeg
7.8
0%
Jul 23FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing
CVE-2026-65705
FF
FFmpeg
FFmpeg
7.8
0%
Jul 23FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()
CVE-2026-65704
FF
FFmpeg
FFmpeg
7.8
0%
Jul 23FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder
CVE-2026-65703
FF
FFmpeg
FFmpeg
7.8
0%
Jul 23FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder
CVE-2026-64835
FF
FFmpeg
FFmpeg
8.8
0%
Jul 22FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
CVE-2026-64834
FF
FFmpeg
FFmpeg
7.5
1%
Jul 22FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
CVE-2026-64833
FF
FFmpeg
FFmpeg
7.1
0%
Jul 22FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c
CVE-2026-64832
FF
FFmpeg
FFmpeg
8.8
0%
Jul 22FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c
CVE-2026-64831
FF
FFmpeg
FFmpeg
8.8
1%
Jul 22FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder
CVE-2026-64830
FF
FFmpeg
FFmpeg
8.8
1%
Jul 22FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
CVE-2026-58049
FF
FFmpeg
FFmpeg
8.6
0%
Jun 28FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
CVE-2026-8461
FF
FFmpeg
FFmpeg
8.8
2%
Jun 18Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder
CVE-2026-40962
FF
FFmpeg
FFmpeg
9.8
0%
Apr 16FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c
CVE-2026-30999
FF
Ffmpeg
Ffmpeg
7.5
0%
Apr 13A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input
CVE-2026-30998
FF
Ffmpeg
Ffmpeg
7.5
0%
Apr 13An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a…
CVE-2026-30997
FF
Ffmpeg
Ffmpeg
7.5
0%
Apr 13An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input
CVE-2025-69693
FF
Ffmpeg
Ffmpeg
5.4
0%
Mar 16Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c)
CVE-2025-12343
FF
Ffmpeg
Ffmpeg
5.5
0%
Feb 18Ffmpeg: double-free vulnerability in ffmpeg tensorflow dnn backend
CVE-2025-10256
FF
Ffmpeg
Ffmpeg
5.5
0%
Feb 18Ffmpeg: null pointer dereference in firequalizer filter (libavfilter/af_firequalizer.c)
CVE-2025-63757
FF
Ffmpeg
Ffmpeg
7.5
0%
Dec 18Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0
CVE-2024-55069
FF
Ffmpeg
Ffmpeg
5.3
0%
May 2ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c
CVE-2025-1594
FF
Ffmpeg
Ffmpeg
8.8
1%
Feb 23A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1
CVE-2025-25469
FF
Ffmpeg
Ffmpeg
6.5
0%
Feb 18FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c
CVE-2025-25468
FF
Ffmpeg
Ffmpeg
6.5
0%
Feb 18FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c
CVE-2025-22921
FF
Ffmpeg
Ffmpeg
6.5
0%
Feb 18FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c
CVE-2025-1373
FF
Ffmpeg
Ffmpeg
5.5
0%
Feb 17A vulnerability was found in FFmpeg up to 7.1