Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

FFMPEG — Vulnerabilities & Security Advisories 54

Browse all 54 CVE security advisories affecting FFMPEG. AI-powered Chinese analysis, POCs, and references for each vulnerability.

FFMPEG serves as a fundamental multimedia framework for processing audio, video, and other digital content across countless applications and systems. Historically, it has been susceptible to remote code execution vulnerabilities through crafted media files, often due to buffer overflows in parsing components. Other common issues include denial-of-service conditions and memory corruption flaws. While no single major incident stands out, its widespread deployment means vulnerabilities in FFMPEG can impact numerous products and services. The 11 recorded CVEs reflect ongoing security challenges in handling untrusted media data, requiring careful input validation and sandboxing when processing files from untrusted sources.

Top products by FFMPEG: FFMPEG MPEG-DASH
CVE ID Title CVSS Severity Published
CVE-2026-107698 FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling — FFmpeg CWE-918 5.4 Medium 2026-10-08
CVE-2026-107696 FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c — FFmpeg CWE-835 6.5 Medium 2026-10-08
CVE-2026-107697 FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist() — FFmpeg CWE-693 4.3 Medium 2026-10-08
CVE-2026-107695 FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist — FFmpeg CWE-835 6.5 Medium 2026-10-08
CVE-2026-107678 FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes — FFmpeg CWE-674 4.7 Medium 2026-10-08
CVE-2026-107677 FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media — FFmpeg CWE-835 4.7 Medium 2026-10-08
CVE-2026-107676 FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer — FFmpeg CWE-908 3.3 Low 2026-10-08
CVE-2026-107675 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol — FFmpeg CWE-322 5.9 Medium 2026-10-08
CVE-2026-107660 FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts — FFmpeg CWE-297 4.8 Medium 2026-10-08
CVE-2026-96611 FFmpeg 9.0前mov.c有符号整数溢出 — FFmpeg CWE-190 6.9 Medium 2026-09-23
CVE-2026-52297 FFmpeg 缓冲区错误漏洞 — FFmpeg CWE-125 2.9 Low 2026-09-13
CVE-2026-52296 FFmpeg 缓冲区错误漏洞 — FFmpeg CWE-125 2.9 Low 2026-09-13
CVE-2026-52295 FFmpeg 安全漏洞 — FFmpeg CWE-125 2.9 Low 2026-09-01
CVE-2026-75147 FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c — FFmpeg CWE-125 7.1 High 2026-08-19
CVE-2026-75146 FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c — FFmpeg CWE-125 8.1 High 2026-08-19
CVE-2026-75145 FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer — FFmpeg CWE-681 5.8 Medium 2026-08-19
CVE-2026-75144 FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer — FFmpeg CWE-122 7.8 High 2026-08-19
CVE-2026-75143 FFmpeg Heap Buffer Overflow via RIST Protocol Reader — FFmpeg CWE-122 9.8 Critical 2026-08-19
CVE-2026-75142 FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c — FFmpeg CWE-121 7.8 High 2026-08-19
CVE-2026-75141 FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing — FFmpeg CWE-122 7.8 High 2026-08-19
CVE-2026-70632 FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing — FFmpeg CWE-787 7.8 High 2026-08-06
CVE-2026-70631 FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder — FFmpeg CWE-908 5.5 Medium 2026-08-06
CVE-2026-70630 FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder — FFmpeg CWE-908 5.5 Medium 2026-08-06
CVE-2026-70629 FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder — FFmpeg CWE-908 5.5 Medium 2026-08-06
CVE-2026-70628 FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File — FFmpeg CWE-190 7.8 High 2026-08-06
CVE-2026-66041 FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter — FFmpeg CWE-787 8.8 High 2026-07-24
CVE-2026-66040 FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder — FFmpeg CWE-122 8.8 High 2026-07-24
CVE-2026-66039 FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File — FFmpeg CWE-190 8.8 High 2026-07-24
CVE-2026-66038 FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c — FFmpeg CWE-908 6.5 Medium 2026-07-24
CVE-2026-66037 FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu() — FFmpeg CWE-770 6.5 Medium 2026-07-24

This page lists every published CVE security advisory associated with FFMPEG. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.