CVEs we hold for Ffmpeg
Records whose assigning authority named Ffmpeg as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-90816FFmpeg Duration hlsproto.c parse_playlist denial of servicen/a FFmpeg CVE-2026-90815FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-boundsn/a FFmpeg CVE-2026-8461Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderFFmpeg CVE-2026-75147FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.cFFmpeg CVE-2026-75146FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cFFmpeg CVE-2026-75145FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP PacketizerFFmpeg CVE-2026-75144FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP PacketizerFFmpeg CVE-2026-75143FFmpeg Heap Buffer Overflow via RIST Protocol ReaderFFmpeg CVE-2026-75142FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.cFFmpeg CVE-2026-75141FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC MuxingFFmpeg CVE-2026-70632FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI DemuxingFFmpeg CVE-2026-70631FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderFFmpeg CVE-2026-70630FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderFFmpeg CVE-2026-70629FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderFFmpeg CVE-2026-70628FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileFFmpeg CVE-2026-66041FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc FilterFFmpeg CVE-2026-66040FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf EncoderFFmpeg CVE-2026-66039FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF FileFFmpeg CVE-2026-66038FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.cFFmpeg CVE-2026-66037FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()FFmpeg CVE-2026-66036FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d FilterFFmpeg CVE-2026-65706FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame ProcessingFFmpeg CVE-2026-65705FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()FFmpeg CVE-2026-65704FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten DecoderFFmpeg CVE-2026-65703FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video DecoderFFmpeg CVE-2026-64835FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio DecoderFFmpeg CVE-2026-64834FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF DemuxerFFmpeg CVE-2026-64833FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cFFmpeg CVE-2026-64832FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.cFFmpeg CVE-2026-64831FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC DecoderFFmpeg CVE-2026-64830FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle DemuxerFFmpeg CVE-2026-58049FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()FFmpeg CVE-2025-9951Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000FFmpeg CVE-2025-59734Heap-buffer-overflow write in FFmpeg SANM process_ftchFFmpeg CVE-2025-59733Heap-buffer-overflow write in FFmpeg EXR dwa_uncompressFFmpeg CVE-2025-59732Heap-buffer-overflow write in FFmpeg EXR dwa_uncompressFFmpeg CVE-2025-59731Heap-buffer-overflow write in FFmpeg EXR dwa_uncompressFFmpeg CVE-2025-59730Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48FFmpeg CVE-2025-59729Heap-buffer-overflow read in FFmpeg DHAV get_durationFFmpeg CVE-2025-59728Heap-buffer-overflow write in FFmpeg MDASH resolve_content_pathFFmpeg MPEG-DASH CVE-2025-1816FFmpeg IAMF File iamf_parse.c audio_element_obu memory leakn/a FFmpeg CVE-2025-1594FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflown/a FFmpeg CVE-2025-1373FFmpeg MOV Parser mov.c mov_read_trak null pointer dereferencen/a FFmpeg CVE-2025-0518Unchecked sscanf return value which leads to memory data leakFFmpeg CVE-2024-7272FFmpeg swresample.c fill_audiodata heap-based overflown/a FFmpeg CVE-2024-7055FFmpeg pnmdec.c pnm_decode_frame heap-based overflown/a FFmpeg 57 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.