Skip to content
Ffmpeg vulnerabilities
Newest
-
ffmpeg
FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure
CVE-2026-120247
6.8 Medium
-
ffmpeg
FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder
CVE-2026-120246
6.8 Medium
-
ffmpeg
FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder
CVE-2026-120245
6.8 Medium
-
ffmpeg
FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder
CVE-2026-120244
6.8 Medium
-
ffmpeg
FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette
CVE-2026-120243
6.8 Medium
-
ffmpeg
FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path
CVE-2026-120210
5.3 Medium
-
ffmpeg
FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling
CVE-2026-107698
Fix available
5.3 Medium
-
ffmpeg
FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()
CVE-2026-107697
Fix available
5.3 Medium
-
ffmpeg
FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c
CVE-2026-107696
Fix available
7.1 High
-
ffmpeg
FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist
CVE-2026-107695
Fix available
7.1 High
-
ffmpeg
FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes
CVE-2026-107678
5.7 Medium
-
ffmpeg
FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media
CVE-2026-107677
Fix available
5.7 Medium
-
ffmpeg
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer
CVE-2026-107676
Fix available
4.8 Medium
-
ffmpeg
FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol
CVE-2026-107675
Fix available
6.0 Medium
-
ffmpeg
FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts
CVE-2026-107660
Fix available
6.3 Medium
-
ffmpeg
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(),...
CVE-2026-96611
Fix available
6.9 Medium
-
ffmpeg
FFmpeg Duration hlsproto.c parse_playlist denial of service
CVE-2026-90816
Fix available
5.3 Medium
-
ffmpeg
FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds
CVE-2026-90815
Fix available
5.3 Medium
-
ffmpeg
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in...
CVE-2026-52297
Fix available
2.9 Low
-
ffmpeg
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata...
CVE-2026-52296
Fix available
2.9 Low
-
ffmpeg
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the...
CVE-2026-30754
Fix available
8.8 High
-
ffmpeg
Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of...
CVE-2026-52295
Fix available
2.9 Low
-
ffmpeg
FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c
CVE-2026-75147
Fix available
6.9 Medium
-
ffmpeg
FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c
CVE-2026-75146
Fix available
7.2 High
-
ffmpeg
FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer
CVE-2026-75145
Fix available
5.8 Medium
-
ffmpeg
FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer
CVE-2026-75144
Fix available
8.5 High
-
ffmpeg
FFmpeg Heap Buffer Overflow via RIST Protocol Reader
CVE-2026-75143
Fix available
9.3 Critical
-
ffmpeg
FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c
CVE-2026-75142
Fix available
8.5 High
-
ffmpeg
FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing
CVE-2026-75141
Fix available
8.5 High
-
ffmpeg
FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing
CVE-2026-70632
Fix available
8.5 High
-
ffmpeg
FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder
CVE-2026-70631
Fix available
6.8 Medium
-
ffmpeg
FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder
CVE-2026-70630
Fix available
6.8 Medium
-
ffmpeg
FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder
CVE-2026-70629
Fix available
6.8 Medium
-
ffmpeg
FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
CVE-2026-70628
Fix available
8.5 High
-
ffmpeg
FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter
CVE-2026-66041
Fix available
7.7 High
-
ffmpeg
FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
CVE-2026-66040
Fix available
8.7 High
-
ffmpeg
FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
CVE-2026-66039
Fix available
8.7 High
-
ffmpeg
FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c
CVE-2026-66038
Fix available
7.1 High
-
ffmpeg
FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()
CVE-2026-66037
Fix available
7.1 High
-
ffmpeg
FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter
CVE-2026-66036
Fix available
7.7 High
-
ffmpeg
FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing
CVE-2026-65706
Fix available
8.5 High
-
ffmpeg
FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()
CVE-2026-65705
Fix available
7.3 High
-
ffmpeg
FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder
CVE-2026-65704
Fix available
7.3 High
-
ffmpeg
FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder
CVE-2026-65703
Fix available
8.5 High
-
ffmpeg
FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
CVE-2026-64835
Fix available
8.7 High
-
ffmpeg
FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
CVE-2026-64834
Fix available
8.7 High
-
ffmpeg
FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c
CVE-2026-64833
Fix available
7.1 High
-
ffmpeg
FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c
CVE-2026-64832
Fix available
8.7 High
-
ffmpeg
FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder
CVE-2026-64831
Fix available
8.7 High
-
ffmpeg
FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
CVE-2026-64830
Fix available
8.7 High
- Show olderLoading…