Vulnerabilities in FFmpeg

34 results
Vexday analysis

FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.

CVE-2025-59733HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59734HIGHHeap-buffer-overflow write in FFmpeg SANM process_ftchEPSS 0.2%CVE-2025-59731MEDIUMHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59732HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2026-70628HIGHFFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileEPSS 0.1%CVE-2025-59730MEDIUMHeap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48EPSS 0.1%CVE-2025-59729MEDIUMHeap-buffer-overflow read in FFmpeg DHAV get_durationEPSS 0.1%CVE-2026-70631MEDIUMFFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderEPSS 0.1%CVE-2026-40962MEDIUMFFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.cEPSS 0.1%CVE-2026-70630MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderEPSS 0.1%CVE-2026-70629MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderEPSS 0.1%CVE-2026-65705HIGHFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()EPSS 0.1%CVE-2026-65706HIGHFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame ProcessingEPSS 0.1%CVE-2026-65704HIGHFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten DecoderEPSS 0.1%