Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-8461HIGHHeap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderEPSS 1.6%CVE-2026-64831HIGHFFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC DecoderEPSS 0.9%CVE-2022-2566CRITICALHeap-memory write in FFMPEGEPSS 0.8%CVE-2026-66040HIGHFFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf EncoderEPSS 0.8%CVE-2026-64834HIGHFFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF DemuxerEPSS 0.7%CVE-2026-75143CRITICALFFmpeg Heap Buffer Overflow via RIST Protocol ReaderEPSS 0.7%CVE-2026-64830HIGHFFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle DemuxerEPSS 0.6%CVE-2026-64835HIGHFFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio DecoderEPSS 0.5%CVE-2026-58049HIGHFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()EPSS 0.5%CVE-2026-66041HIGHFFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc FilterEPSS 0.5%CVE-2026-107695HIGHFFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing PlaylistEPSS 0.5%CVE-2025-9951HIGHRemote code execution via Heap Buffer Overflow in FFmpeg JPEG2000EPSS 0.4%CVE-2026-66036HIGHFFmpeg Heap Out-of-Bounds Write in vf_hqdn3d FilterEPSS 0.4%CVE-2026-64833HIGHFFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.cEPSS 0.4%CVE-2025-0518MEDIUMUnchecked sscanf return value which leads to memory data leakEPSS 0.4%CVE-2026-107696HIGHFFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.cEPSS 0.4%CVE-2026-66037HIGHFFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()EPSS 0.3%CVE-2026-64832HIGHFFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.cEPSS 0.3%CVE-2026-65703HIGHFFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video DecoderEPSS 0.3%CVE-2026-107697MEDIUMFFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()EPSS 0.3%