Vulnerabilidades em FFmpeg
44 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-8461HIGHHeap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderEPSS 1.6%CVE-2022-2566CRITICALHeap-memory write in FFMPEGEPSS 0.8%CVE-2026-66041HIGHFFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc FilterEPSS 0.5%CVE-2026-66040HIGHFFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf EncoderEPSS 0.5%CVE-2026-64834HIGHFFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF DemuxerEPSS 0.5%CVE-2026-64831HIGHFFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC DecoderEPSS 0.5%CVE-2025-9951HIGHRemote code execution via Heap Buffer Overflow in FFmpeg JPEG2000EPSS 0.4%CVE-2026-75143CRITICALFFmpeg Heap Buffer Overflow via RIST Protocol ReaderEPSS 0.4%CVE-2026-66036HIGHFFmpeg Heap Out-of-Bounds Write in vf_hqdn3d FilterEPSS 0.4%CVE-2025-0518MEDIUMUnchecked sscanf return value which leads to memory data leakEPSS 0.4%CVE-2026-64830HIGHFFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle DemuxerEPSS 0.3%CVE-2026-64832HIGHFFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.cEPSS 0.3%CVE-2026-64835HIGHFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio DecoderEPSS 0.3%CVE-2026-66039HIGHFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF FileEPSS 0.3%CVE-2026-58049HIGHFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()EPSS 0.3%CVE-2026-75146HIGHFFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cEPSS 0.3%CVE-2026-66038HIGHFFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.cEPSS 0.2%CVE-2026-64833HIGHFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cEPSS 0.2%CVE-2026-66037HIGHFFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()EPSS 0.2%CVE-2026-70632HIGHFFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI DemuxingEPSS 0.2%