Ffmpeg vulnerabilities
181 CVEs and advisories name Ffmpeg as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-125210FFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle Decoding
- CVE-2026-125209FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow via dvdsubenc.c
- CVE-2026-125208FFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.c
- CVE-2026-125207FFmpeg through 9.0.2 Excessive Memory Allocation via Interplay ACM Decoder
- CVE-2026-125206FFmpeg through 9.0.2 Out-of-Bounds Read via prores_ks Interlaced Alpha Encoding
- CVE-2026-125205FFmpeg through 9.0.2 Memory Exhaustion via av1_frame_merge Bitstream Filter
- CVE-2026-125204FFmpeg through 9.0.2 Heap Buffer Overflow in libwebp Encoder Conditional Replenishment
- CVE-2026-125203FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow in Cook Multichannel Decoder
- CVE-2026-125202FFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile Arrays
- CVE-2026-125201FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 Heap Overflow via vulkan_av1.c
- CVE-2026-125200FFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU Payloads
- CVE-2026-125199FFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()
- CVE-2026-125198FFmpeg through 9.0.2 Memory Leak via MediaCodec JNI setBuffer
- CVE-2026-125197FFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread Decoding
- CVE-2026-125196FFmpeg through 9.0.2 Heap Buffer Overflow via liboapv APV Encoder Wrapper
- CVE-2026-125195FFmpeg through 9.0.2 Uninitialized Memory Disclosure via ADPCM_MS Trellis Encoding
- CVE-2026-125194FFmpeg through 9.0.2 Out-of-Bounds Read via PCM DVD Encoder
- CVE-2026-125193FFmpeg through 9.0.2 Out-of-Bounds Read via bitpacked_decode_uyvy422()
- CVE-2026-125192FFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized Buffer
- CVE-2026-125191FFmpeg through 9.0.2 V4L2 M2M Decoder Deadlock via Reference Count Leak
- CVE-2026-125190FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via MVC2 Decoder
- CVE-2026-125189FFmpeg 8.1 through 9.0.2 Denial of Service via lcevc_metadata Bitstream Filter
- CVE-2026-125188FFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced Encoding
- CVE-2026-125187FFmpeg through 9.0.2 TTA Encoder Reachable Assertion via tta_encode_frame()
- CVE-2026-125186FFmpeg through 9.0.2 CPU Exhaustion via dts2pts Bitstream Filter
- CVE-2026-125185FFmpeg through 9.0.2 Division by Zero via AFGS1 Film Grain Scaling Points
- CVE-2026-125184FFmpeg 6.1 through 9.0.2 Information Disclosure via CamStudio Decoder cscd.c
- CVE-2026-125183FFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension Parsing
- CVE-2026-125182FFmpeg through 9.0.2 Out-of-Bounds Read via Cook Decoder js_subband_start
- CVE-2026-125181FFmpeg through 9.0.2 FLIC Decoder Out-of-Bounds Write via FLI_BRUN Byte Swap