Latest vulnerabilities for vendor "ffmpeg"

Where

Sort:

Software

ffmpeg

ffmpeg libavcodec (magicyuv decoder)

ffmpeg ffmpeg rasc decoder (libavcodec/rasc)

ffmpeg iamf demuxer

ffmpeg iamf file handler

ffmpeg libavcodec (ffmpeg)

ffmpeg libswresample

ffmpeg mov parser

ffmpeg rasc video decoder (decode_dlta in libavcodec/rasc.c)

ffmpeg vf_swaprect video filter

FFmpeg FFmpegFFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter

Risk 77

Severity

7.7

First published (updated )

CVE-2026-66041

FFmpeg FFmpegFFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder

Risk 77

Severity

8.7

First published (updated )

CVE-2026-66040

FFmpeg FFmpegFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File

Risk 77

Severity

8.7

First published (updated )

CVE-2026-66039

FFmpeg FFmpegFFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c

Risk 40

Severity

7.1

First published (updated )

CVE-2026-66038

FFmpeg IAMF demuxerFFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()

Risk 40

Severity

7.1

First published (updated )

CVE-2026-66037

FFmpeg FFmpegFFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter

Risk 77

Severity

7.7

First published (updated )

CVE-2026-66036

FFmpeg vf_swaprect video filterFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing

Risk 72

Severity

8.5

First published (updated )

CVE-2026-65706

FFmpeg FFmpegFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()

Risk 68

Severity

7.3

First published (updated )

CVE-2026-65705

FFmpeg FFmpegFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

Risk 68

Severity

7.3

First published (updated )

CVE-2026-65704

FFmpeg FFmpegFFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder

Risk 72

Severity

8.5

First published (updated )

CVE-2026-65703

FFmpeg FFmpegFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder

Risk 77

Severity

8.7

First published (updated )

CVE-2026-64835

FFmpeg FFmpegFFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer

Risk 47

Severity

8.7

First published (updated )

CVE-2026-64834

FFmpeg FFmpegFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c

Risk 48

Severity

7.1

First published (updated )

CVE-2026-64833

FFmpeg FFmpegFFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c

Risk 77

Severity

8.7

First published (updated )

CVE-2026-64832

FFmpeg FFmpegFFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder

Risk 77

Severity

8.7

First published (updated )

CVE-2026-64831

FFmpeg FFmpegFFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

Risk 77

Severity

8.7

First published (updated )

CVE-2026-64830

FFmpeg RASC video decoder (decode_dlta in libavcodec/rasc.c)FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at t…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2493952

FFmpeg libavcodecFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

Risk 65

Severity

8.8

First published (updated )

CVE-2026-58049

Sharing findings on PixelSmash (CVE-2026-8461): High-severity FFmpeg vulnerability; what it is, who's affected, and how to fix it

First published (updated )

Social

FFmpeg FFmpegFfmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()

Risk 37

Severity

6.5

First published (updated )

CVE-2026-12706

FFmpeg FFmpeg RASC decoder (libavcodec/rasc)Use After Free

Risk 19

Severity

First published (updated )

REDHAT-BUG-2490710

FFmpeg libavcodec (MagicYUV decoder)An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV de…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2490308

FFmpeg libavcodec (MagicYUV decoder)Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

Risk 58

Severity

8.8

EPSS

0.39%

First published (updated )

CVE-2026-8461

oss-secSv: Coordinated Disclosuin the LLM Age

First published (updated )

https://seclists.org/oss-sec/2026/q2/678

oss-secSv: Coordinated Disclosuin the LLM Age

First published (updated )

https://seclists.org/oss-sec/2026/q2/667

oss-secSv: Coordinated Disclosuin the LLM Age

First published (updated )

https://seclists.org/oss-sec/2026/q2/541

FFmpeg FFmpegInteger Overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2026-40962

FFmpeg FFmpegFfmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

Risk 27

Severity

6.5

EPSS

0.07%

First published (updated )

CVE-2026-6385

FFmpeg FFmpegInteger Overflow

Risk 19

Severity

First published (updated )

REDHAT-BUG-2458764

FFmpeg FFmpegBuffer Overflow

Risk 43

Severity

7.5

First published (updated )

CVE-2026-30999

Trending

Vendor Risk Score

Software

FFmpeg FFmpegFFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter

FFmpeg FFmpegFFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder

FFmpeg FFmpegFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File

FFmpeg FFmpegFFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c

FFmpeg IAMF demuxerFFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()

Don't miss critical vulnerabilities

FFmpeg FFmpegFFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter

FFmpeg vf_swaprect video filterFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing

FFmpeg FFmpegFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()

FFmpeg FFmpegFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder

FFmpeg FFmpegFFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder

Don't miss critical vulnerabilities

FFmpeg FFmpegFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder

FFmpeg FFmpegFFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer

FFmpeg FFmpegFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c

FFmpeg FFmpegFFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c

FFmpeg FFmpegFFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder

Don't miss critical vulnerabilities

FFmpeg FFmpegFFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer

FFmpeg RASC video decoder (decode_dlta in libavcodec/rasc.c)FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at t…

FFmpeg libavcodecFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()

Sharing findings on PixelSmash (CVE-2026-8461): High-severity FFmpeg vulnerability; what it is, who's affected, and how to fix it

FFmpeg FFmpegFfmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()

Don't miss critical vulnerabilities

FFmpeg FFmpeg RASC decoder (libavcodec/rasc)Use After Free

FFmpeg libavcodec (MagicYUV decoder)An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV de…

FFmpeg libavcodec (MagicYUV decoder)Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

oss-secSv: Coordinated Disclosuin the LLM Age

oss-secSv: Coordinated Disclosuin the LLM Age

Don't miss critical vulnerabilities

oss-secSv: Coordinated Disclosuin the LLM Age

FFmpeg FFmpegInteger Overflow

FFmpeg FFmpegFfmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

FFmpeg FFmpegInteger Overflow

FFmpeg FFmpegBuffer Overflow

Don't miss critical vulnerabilities

Company

Resources

Contact