Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ffmpeg — Vulnerabilities & Security Advisories 81

All 81 CVE vulnerabilities found in ffmpeg, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities in the ffmpeg media framework, focusing on memory corruption and buffer overflow weaknesses. The collection covers publicly reported issues spanning from the initial releases through current versions, highlighting recurring defects in image decoding, audio processing, and network stream handling. Readers can use this hub to track the project’s security advisories, analyze trends in specific weakness classes, and review the complete vulnerability history to identify patterns in crash reports, memory safety errors, and input validation flaws. The data helps developers and security teams assess the risk profile of deployments and verify which specific components require attention. Each entry links to the detailed report, providing context on root cause and affected code paths without duplicating the full advisory text. This centralizes fragmented security information into a single reference point for maintaining a hardened ffmpeg build.

Vendor: unspecified

CVE ID Title CVSS Severity Published
CVE-2026-96611 FFmpeg 9.0前mov.c有符号整数溢出 CWE-190 6.9 Medium 2026-09-23
CVE-2026-90816 FFmpeg Duration hlsproto.c parse_playlist denial of service CWE-404 4.3 Medium 2026-09-14
CVE-2026-90815 FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds CWE-125 6.3 Medium 2026-09-14
CVE-2026-52297 FFmpeg 缓冲区错误漏洞 CWE-125 2.9 Low 2026-09-13
CVE-2026-52296 FFmpeg 缓冲区错误漏洞 CWE-125 2.9 Low 2026-09-13
CVE-2026-52295 FFmpeg 安全漏洞 CWE-125 2.9 Low 2026-09-01
CVE-2026-75147 FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c CWE-125 7.1 High 2026-08-19
CVE-2026-75146 FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c CWE-125 8.1 High 2026-08-19
CVE-2026-75145 FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer CWE-681 5.8 Medium 2026-08-19
CVE-2026-75144 FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer CWE-122 7.8 High 2026-08-19
CVE-2026-75143 FFmpeg Heap Buffer Overflow via RIST Protocol Reader CWE-122 9.8 Critical 2026-08-19
CVE-2026-75142 FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c CWE-121 7.8 High 2026-08-19
CVE-2026-75141 FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing CWE-122 7.8 High 2026-08-19
CVE-2026-70632 FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing CWE-787 7.8 High 2026-08-06
CVE-2026-70631 FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder CWE-908 5.5 Medium 2026-08-06
CVE-2026-70630 FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder CWE-908 5.5 Medium 2026-08-06
CVE-2026-70629 FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder CWE-908 5.5 Medium 2026-08-06
CVE-2026-70628 FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File CWE-190 7.8 High 2026-08-06
CVE-2026-66041 FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter CWE-787 8.8 High 2026-07-24
CVE-2026-66040 FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder CWE-122 8.8 High 2026-07-24
CVE-2026-66039 FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File CWE-190 8.8 High 2026-07-24
CVE-2026-66038 FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c CWE-908 6.5 Medium 2026-07-24
CVE-2026-66037 FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu() CWE-770 6.5 Medium 2026-07-24
CVE-2026-66036 FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter CWE-122 8.8 High 2026-07-24
CVE-2026-65706 FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing CWE-787 7.8 High 2026-07-23
CVE-2026-65705 FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame() CWE-787 7.8 High 2026-07-23
CVE-2026-65704 FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder CWE-787 7.8 High 2026-07-23
CVE-2026-65703 FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder CWE-787 7.8 High 2026-07-23
CVE-2026-64835 FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder CWE-787 8.8 High 2026-07-22
CVE-2026-64834 FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer CWE-835 7.5 High 2026-07-22

All 81 known CVE vulnerabilities affecting ffmpeg with full Chinese analysis, references, and POCs where available.