Vulnerabilities in FFMPEG

34 results
Vexday analysis

FFmpeg apresenta footprint mínimo na base Vexday com apenas 1 CVE crítica registrada, atualmente sem evidência de exploração ativa no KEV. A vulnerabilidade identificada (CWE-122: Buffer Overflow) representa risco clássico em processamento de mídia, mas sua ausência em ataques observados e falta de atualizações recentes sugerem controle adequado ou adoção lenta do vetor. Recomenda-se validar se a exposição reflete uso efetivo em ambiente produtivo.

CVE-2025-59733HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59734HIGHHeap-buffer-overflow write in FFmpeg SANM process_ftchEPSS 0.2%CVE-2025-59731MEDIUMHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59732HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2026-70628HIGHFFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileEPSS 0.1%CVE-2025-59730MEDIUMHeap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48EPSS 0.1%CVE-2025-59729MEDIUMHeap-buffer-overflow read in FFmpeg DHAV get_durationEPSS 0.1%CVE-2026-70631MEDIUMFFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderEPSS 0.1%CVE-2026-40962MEDIUMFFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.cEPSS 0.1%CVE-2026-70630MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderEPSS 0.1%CVE-2026-70629MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderEPSS 0.1%CVE-2026-65705HIGHFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()EPSS 0.1%CVE-2026-65706HIGHFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame ProcessingEPSS 0.1%CVE-2026-65704HIGHFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten DecoderEPSS 0.1%