Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-66039HIGHFFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF FileEPSS 0.3%CVE-2026-120210MEDIUMFFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP PathEPSS 0.3%CVE-2026-75146HIGHFFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cEPSS 0.3%CVE-2026-107698MEDIUMFFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect HandlingEPSS 0.3%CVE-2026-66038HIGHFFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.cEPSS 0.2%CVE-2026-70632HIGHFFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI DemuxingEPSS 0.2%CVE-2026-75142HIGHFFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.cEPSS 0.2%CVE-2026-75144HIGHFFmpeg Heap Buffer Overflow in VC-2/Dirac RTP PacketizerEPSS 0.2%CVE-2026-75141HIGHFFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC MuxingEPSS 0.2%CVE-2025-59728HIGHHeap-buffer-overflow write in FFmpeg MDASH resolve_content_pathEPSS 0.2%CVE-2025-59732HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2026-65705HIGHFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()EPSS 0.2%CVE-2026-65706HIGHFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame ProcessingEPSS 0.2%CVE-2026-107675MEDIUMFFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp ProtocolEPSS 0.2%CVE-2025-59733HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59734HIGHHeap-buffer-overflow write in FFmpeg SANM process_ftchEPSS 0.2%CVE-2026-70631MEDIUMFFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderEPSS 0.2%CVE-2026-65704HIGHFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten DecoderEPSS 0.2%CVE-2026-52295LOWFFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavfEPSS 0.2%CVE-2025-59731MEDIUMHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%