Ffmpeg vulnerabilities
181 CVEs and advisories name Ffmpeg as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-70629FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder
- CVE-2026-70628FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
- CVE-2026-66041FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter
- CVE-2026-66040FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
- CVE-2026-66039FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
- CVE-2026-66038FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c
- CVE-2026-66037FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()
- CVE-2026-66036FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter
- CVE-2026-65706FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing
- CVE-2026-65705FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()
- CVE-2026-65704FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder
- CVE-2026-65703FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder
- CVE-2026-64835FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
- CVE-2026-64834FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
- CVE-2026-64833FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c
- CVE-2026-64832FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c
- CVE-2026-64831FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder
- CVE-2026-64830FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
- CVE-2026-58049FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
- CVE-2026-8461Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder
- CVE-2026-40962FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c
- CVE-2025-59734Heap-buffer-overflow write in FFmpeg SANM process_ftch
- CVE-2025-59733Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
- CVE-2025-59732Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
- CVE-2025-59731Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
- CVE-2025-59730Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48
- CVE-2025-59729Heap-buffer-overflow read in FFmpeg DHAV get_duration
- CVE-2025-59728Heap-buffer-overflow write in FFmpeg MDASH resolve_content_path
- CVE-2025-9951Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000
- CVE-2025-0518Unchecked sscanf return value which leads to memory data leak