Ffmpeg vulnerabilities
181 CVEs and advisories name Ffmpeg as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-125270FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M Encoder
- CVE-2026-125269FFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.c
- CVE-2026-125268FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD Decoder
- CVE-2026-125267FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC Decoder
- CVE-2026-125266FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via SANM Codec 23
- CVE-2026-125265FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer
- CVE-2026-125264FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC Count
- CVE-2026-125263FFmpeg 9.0 through 9.0.2 Memory Exhaustion via LCEVC Enhancement Dimensions
- CVE-2026-125262FFmpeg through 9.0.2 Heap Buffer Overflow via LCEVC Enhancement Decoding
- CVE-2026-125261FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c
- CVE-2026-125260FFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE Path
- CVE-2026-125259FFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks Encoder
- CVE-2026-125258FFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.c
- CVE-2026-125257FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search
- CVE-2026-125256FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes Routine
- CVE-2026-125255FFmpeg through 9.0.2 Use-After-Free in MJPEG Hardware-Accelerated Decoding
- CVE-2026-125254FFmpeg through 9.0.2 Division by Zero via VVC ff_vvc_slice_rpl()
- CVE-2026-125253FFmpeg through 9.0.2 VP9 CBS Superframe Integer Overflow Out-of-Bounds Read
- CVE-2026-125252FFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture Buffers
- CVE-2026-125251FFmpeg through 9.0.2 VVC Decoder Heap Out-of-Bounds Write via refs.c
- CVE-2026-125250FFmpeg through 9.0.2 GIF Encoder Heap Buffer Overflow via shrunk_buf Remap
- CVE-2026-125249FFmpeg 7.1 through 9.0.2 Heap Out-of-Bounds Write via Vulkan Slice Buffer Sizing
- CVE-2026-125248FFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap Buffer
- CVE-2026-125247FFmpeg through 9.0.2 Integer Overflow via dng_decode_tiles() in libavcodec/tiff.c
- CVE-2026-125246FFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragment
- CVE-2026-125245FFmpeg through 9.0.2 Memory Leak in MJPEG Hwaccel SOF Decoding
- CVE-2026-125244FFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_points
- CVE-2026-125243FFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS Decoder
- CVE-2026-125242FFmpeg through 9.0.2 Memory Leak via VDPAU Hwaccel Bitstream Buffer Table
- CVE-2026-125241FFmpeg through 9.0.2 Heap Buffer Overflow via FLIC Decoder check_pixel_ptr