Vulnerability index

Browse CVEs

332 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ffmpeg HIGH 8.8
CVE-2026-66040

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remo…

Fix: after 8.1.2
Fix from $1,950 2026-07-24
Ffmpeg HIGH 7.8
CVE-2026-66041

FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_quirc filter that allows an attacker t…

Fix: after 8.1.2
Fix from $1,950 2026-07-24
Ffmpeg HIGH 8.8
CVE-2026-66036

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to cor…

Fix: after 8.1.2
Fix from $1,950 2026-07-24
Ffmpeg HIGH 7.8
CVE-2026-66039

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to c…

Fix: after 8.1.2
Fix from $1,950 2026-07-24
Ffmpeg MEDIUM 6.5
CVE-2026-66038

FFmpeg through 8.1.2, fixed in commit 8670835, contains an information disclosure vulnerability in the LCL/ZLIB video decoder that allows attackers t…

Fix: after 8.1.2
Fix from $1,600 2026-07-24
Ffmpeg MEDIUM 5.5
CVE-2026-66037

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains an uncontrolled resource consumption vulnerability in the IAMF demuxer that allows an unauthe…

Fix: after 8.1.2
Fix from $1,600 2026-07-24
Ffmpeg HIGH 7.8
CVE-2026-65705

FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter that allows attackers to corrupt heap…

Fix: after 8.1.2
Fix from $1,950 2026-07-23
Ffmpeg HIGH 7.8
CVE-2026-65706

FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allows attackers to corrupt heap …

Fix: after 8.1.2
Fix from $1,950 2026-07-23
Ffmpeg HIGH 7.8
CVE-2026-65703

FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap c…

Fix: after 8.1.2
Fix from $1,950 2026-07-23
Ffmpeg HIGH 7.8
CVE-2026-65704

FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat fil…

Fix: after 8.1.2
Fix from $1,950 2026-07-23
Ffmpeg HIGH 8.8
CVE-2026-64832

FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec/nvdec.c that allows atta…

Fix: after 8.1.2
Fix from $1,950 2026-07-22
Ffmpeg HIGH 8.8
CVE-2026-64835

FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allow…

Fix: after 8.1.2
Fix from $1,950 2026-07-22
Ffmpeg HIGH 7.5
CVE-2026-64834

FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdec_asf.c that allows remote …

Fix: after 8.1.2
Fix from $1,950 2026-07-22
Ffmpeg HIGH 7.1
CVE-2026-64833

FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buf…

Fix: after 8.1.2
Fix from $1,950 2026-07-22
Ffmpeg HIGH 8.8
CVE-2026-64830

FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjac…

Fix: after 8.1.2
Fix from $1,950 2026-07-22
Ffmpeg HIGH 8.8
CVE-2026-64831

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to …

Fix: after 8.1.2
Fix from $1,950 2026-07-22
Ffmpeg CRITICAL 9.8
CVE-2026-40962

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.

Fix: 8.1+
Fix from $2,300 2026-04-16
Ffmpeg HIGH 7.5
CVE-2026-30997

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) …

Fix: after 8.0.1
Fix from $1,950 2026-04-13
Ffmpeg HIGH 7.5
CVE-2026-30998

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of S…

Fix: after 8.0.1
Fix from $1,950 2026-04-13
Ffmpeg HIGH 7.5
CVE-2026-30999

A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Fix: after 8.0.1
Fix from $1,950 2026-04-13
Ffmpeg MEDIUM 5.4
CVE-2025-69693

Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only ch…

Patch available
Fix from $1,600 2026-03-16
Ffmpeg MEDIUM 5.5
CVE-2025-10256

A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return …

Fix: 8.0+
Fix from $1,600 2026-02-18
Ffmpeg MEDIUM 5.5
CVE-2025-12343

A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() f…

Fix: 8.1+
Fix from $1,600 2026-02-18
Ffmpeg HIGH 7.5
CVE-2025-63757

Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.

Patch available
Fix from $1,950 2025-12-18
Ffmpeg MEDIUM 5.3
CVE-2024-55069

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c.

Patch available
Fix from $1,600 2025-05-02
Ffmpeg HIGH 8.8
CVE-2025-1594

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavco…

Fix: after 7.1
Fix from $1,950 2025-02-23
Ffmpeg MEDIUM 6.5
CVE-2025-25468

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.

Fix: 2025-01-13+
Fix from $1,600 2025-02-18
Ffmpeg MEDIUM 6.5
CVE-2025-25469

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.

Fix: 2025-01-13+
Fix from $1,600 2025-02-18
Ffmpeg MEDIUM 5.5
CVE-2025-1373

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file lib…

Fix: after 7.1
Fix from $1,600 2025-02-17
Ffmpeg MEDIUM 5.3
CVE-2025-0518

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associ…

Patch available
Fix from $1,600 2025-01-16