Ffmpeg vulnerabilities
181 CVEs and advisories name Ffmpeg as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-125240FFmpeg through 9.0.2 Resource Leak in libsvtjpegxs JPEG XS Decoder Wrapper
- CVE-2026-125239FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC DXVA Tile Parameters
- CVE-2026-125238FFmpeg through 9.0.2 Reachable Assertion in libxevd EVC Decoder Wrapper
- CVE-2026-125237FFmpeg 8.1 through 9.0.2 Denial of Service via DPX Vulkan Hwaccel Error Path
- CVE-2026-125236FFmpeg through 9.0.2 VVC Decoder Memory Leak via alloc_frame()
- CVE-2026-125235FFmpeg through 9.0.2 Heap Overflow via QSV Encoder submit_frame()
- CVE-2026-125234FFmpeg through 9.0.2 WavPack Encoder Integer Overflow Infinite Loop via wavpack_encode_init
- CVE-2026-125233FFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle Encoder
- CVE-2026-125232FFmpeg through 9.0.2 Division by Zero in B-frame Motion Estimation
- CVE-2026-125231FFmpeg 4.4 through 9.0.2 NULL Pointer Dereference via adx_decode_header()
- CVE-2026-125230FFmpeg through 9.0.2 Integer Overflow Division by Zero via pcm_rechunk Filter
- CVE-2026-125229FFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median Predictor
- CVE-2026-125228FFmpeg before 8.1.3 and 9.x before 9.0.2 Out-of-Bounds Read in Vorbis Encoder
- CVE-2026-125227FFmpeg through 9.0.2 Heap Buffer Overflow via cbs_jpeg_write_scan Integer Overflow
- CVE-2026-125226FFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen Demuxer
- CVE-2026-125225FFmpeg through 9.0.2 NULL Pointer Dereference via aac_adtstoasc Bitstream Filter
- CVE-2026-125224FFmpeg through 9.0.2 Vorbis Parser CPU Exhaustion via Invalid Extradata
- CVE-2026-125223FFmpeg 8.0 through 9.0.2 Memory Leak in VP9 Decoder via vp9_decode_frame
- CVE-2026-125222FFmpeg through 9.0.2 Heap Buffer Overflow via hap_parse_frame_header()
- CVE-2026-125221FFmpeg through 9.0.2 Uncontrolled Recursion in FLAC Parser score_header()
- CVE-2026-125220FFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading Failure
- CVE-2026-125219FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VDPAU Tile Arrays
- CVE-2026-125218FFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()
- CVE-2026-125217FFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory Disclosure
- CVE-2026-125216FFmpeg through 9.0.2 DPX Encoder NULL Pointer Dereference via encode_gbrp12()
- CVE-2026-125215FFmpeg 7.1 through 9.0.2 NULL Pointer Dereference via ff_dovi_rpu_generate()
- CVE-2026-125214FFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM Decoder
- CVE-2026-125213FFmpeg through 9.0.2 Heap Buffer Overflow via PSD Decoder RLE Path
- CVE-2026-125212FFmpeg through 9.0.2 Heap Buffer Overflow via VideoToolbox Encoder
- CVE-2026-125211FFmpeg through 9.0.2 Heap Corruption via libaribcaption ASS Error Cleanup