Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ffmpeg — Vulnerabilities & Security Advisories 86

All 86 CVE vulnerabilities found in ffmpeg, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities in the ffmpeg media framework, focusing on memory corruption and buffer overflow weaknesses. The collection covers publicly reported issues spanning from the initial releases through current versions, highlighting recurring defects in image decoding, audio processing, and network stream handling. Readers can use this hub to track the project’s security advisories, analyze trends in specific weakness classes, and review the complete vulnerability history to identify patterns in crash reports, memory safety errors, and input validation flaws. The data helps developers and security teams assess the risk profile of deployments and verify which specific components require attention. Each entry links to the detailed report, providing context on root cause and affected code paths without duplicating the full advisory text. This centralizes fragmented security information into a single reference point for maintaining a hardened ffmpeg build.

Vendor: unspecified

CVE ID Title CVSS Severity Published
CVE-2026-65705 FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame() CWE-787 7.8 High 2026-07-23
CVE-2026-65704 FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder CWE-787 7.8 High 2026-07-23
CVE-2026-65703 FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder CWE-787 7.8 High 2026-07-23
CVE-2026-64835 FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder CWE-787 8.8 High 2026-07-22
CVE-2026-64834 FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer CWE-835 7.5 High 2026-07-22
CVE-2026-64833 FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c CWE-125 7.1 High 2026-07-22
CVE-2026-64832 FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c CWE-415 8.8 High 2026-07-22
CVE-2026-64831 FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder CWE-121 8.8 High 2026-07-22
CVE-2026-64830 FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer CWE-122 8.8 High 2026-07-22
CVE-2026-58049 FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta() CWE-787 8.6 High 2026-06-28
CVE-2026-8461 Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder CWE-787 8.8 High 2026-06-18
CVE-2026-40962 FFmpeg 安全漏洞 CWE-190 4.9 Medium 2026-04-16
CVE-2025-59734 Heap-buffer-overflow write in FFmpeg SANM process_ftch CWE-416 7.8AI High AI 2025-10-06
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress CWE-787 7.1AI High AI 2025-10-06
CVE-2025-59732 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress CWE-787 7.1AI High AI 2025-10-06
CVE-2025-59731 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress CWE-787 7.8AI High AI 2025-10-06
CVE-2025-59730 Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48 CWE-787 9.8AI Critical AI 2025-10-06
CVE-2025-59729 Heap-buffer-overflow read in FFmpeg DHAV get_duration CWE-787 3.3AI Low AI 2025-10-06
CVE-2025-9951 Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000 CWE-122 8.8AI High AI 2025-09-09
CVE-2025-1816 FFmpeg IAMF File iamf_parse.c audio_element_obu memory leak CWE-401 4.3 Medium 2025-03-02
CVE-2025-1594 FFmpeg AAC Encoder aacenc_tns.c ff_aac_search_for_tns stack-based overflow CWE-121 6.3 Medium 2025-02-23
CVE-2025-1373 FFmpeg MOV Parser mov.c mov_read_trak null pointer dereference CWE-476 3.3 Low 2025-02-17
CVE-2025-0518 Unchecked sscanf return value which leads to memory data leak CWE-252 6.5 - 2025-01-16
CVE-2024-7272 FFmpeg swresample.c fill_audiodata heap-based overflow CWE-122 6.3 Medium 2024-08-08
CVE-2024-7055 FFmpeg pnmdec.c pnm_decode_frame heap-based overflow CWE-122 6.3 Medium 2024-08-06
CVE-2022-3341 FFmpeg 代码问题漏洞 CWE-476 6.5 - 2023-01-12
CVE-2022-3109 FFmpeg 代码问题漏洞 CWE-476 7.5 - 2022-12-16
CVE-2022-3964 ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds CWE-119 4.3 Medium 2022-11-13
CVE-2022-3965 ffmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds CWE-119 4.3 Medium 2022-11-13
CVE-2022-2566 Heap-memory write in FFMPEG CWE-122 9.0 Critical 2022-09-23

All 86 known CVE vulnerabilities affecting ffmpeg with full Chinese analysis, references, and POCs where available.