Browse CVEs

HIGH 8.8 CVE-2026-66040 FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remo… Ffmpeg after 8.1.2 Fix from $1,9502026-07-24 HIGH 7.8 CVE-2026-66041 FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker t… Ffmpeg after 8.1.2 Fix from $1,9502026-07-24 HIGH 8.8 CVE-2026-66036 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to cor… Ffmpeg after 8.1.2 Fix from $1,9502026-07-24 HIGH 7.8 CVE-2026-66039 FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to c… Ffmpeg after 8.1.2 Fix from $1,9502026-07-24 MEDIUM 6.5 CVE-2026-66038 FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers t… Ffmpeg after 8.1.2 Fix from $1,6002026-07-24 MEDIUM 5.5 CVE-2026-66037 FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthe… Ffmpeg after 8.1.2 Fix from $1,6002026-07-24 HIGH 7.8 CVE-2026-65705 FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap… Ffmpeg after 8.1.2 Fix from $1,9502026-07-23 HIGH 7.8 CVE-2026-65706 FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap … Ffmpeg after 8.1.2 Fix from $1,9502026-07-23 HIGH 7.8 CVE-2026-65703 FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap c… Ffmpeg after 8.1.2 Fix from $1,9502026-07-23 HIGH 7.8 CVE-2026-65704 FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat fil… Ffmpeg after 8.1.2 Fix from $1,9502026-07-23 HIGH 8.8 CVE-2026-64832 FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows atta… Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-64835 FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allow… Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 HIGH 7.5 CVE-2026-64834 FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote … Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 HIGH 7.1 CVE-2026-64833 FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buf… Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-64830 FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjac… Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 HIGH 8.8 CVE-2026-64831 FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to … Ffmpeg after 8.1.2 Fix from $1,9502026-07-22 CRITICAL 9.8 CVE-2026-40962 FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c. Ffmpeg 8.1+ Fix from $2,3002026-04-16 HIGH 7.5 CVE-2026-30997 An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) … Ffmpeg after 8.0.1 Fix from $1,9502026-04-13 HIGH 7.5 CVE-2026-30998 An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of S… Ffmpeg after 8.0.1 Fix from $1,9502026-04-13 HIGH 7.5 CVE-2026-30999 A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. Ffmpeg after 8.0.1 Fix from $1,9502026-04-13 MEDIUM 5.4 CVE-2025-69693 Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only ch… Ffmpeg Patch available Fix from $1,6002026-03-16 MEDIUM 5.5 CVE-2025-10256 A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return … Ffmpeg 8.0+ Fix from $1,6002026-02-18 MEDIUM 5.5 CVE-2025-12343 A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() f… Ffmpeg 8.1+ Fix from $1,6002026-02-18 HIGH 7.5 CVE-2025-63757 Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0. Ffmpeg Patch available Fix from $1,9502025-12-18 MEDIUM 5.3 CVE-2024-55069 ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c. Ffmpeg Patch available Fix from $1,6002025-05-02 HIGH 8.8 CVE-2025-1594 A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavco… Ffmpeg after 7.1 Fix from $1,9502025-02-23 MEDIUM 6.5 CVE-2025-25468 FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c. Ffmpeg 2025-01-13+ Fix from $1,6002025-02-18 MEDIUM 6.5 CVE-2025-25469 FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c. Ffmpeg 2025-01-13+ Fix from $1,6002025-02-18 MEDIUM 5.5 CVE-2025-1373 A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file lib… Ffmpeg after 7.1 Fix from $1,6002025-02-17 MEDIUM 5.3 CVE-2025-0518 Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associ… Ffmpeg Patch available Fix from $1,6002025-01-16