Vulnerabilidades em FFmpeg

34 resultados
Análise Vexday

FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.

CVE-2025-59734HIGHHeap-buffer-overflow write in FFmpeg SANM process_ftchEPSS 0.2%CVE-2025-59731MEDIUMHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59732HIGHHeap-buffer-overflow write in FFmpeg EXR dwa_uncompressEPSS 0.2%CVE-2025-59730MEDIUMHeap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48EPSS 0.1%CVE-2025-59729MEDIUMHeap-buffer-overflow read in FFmpeg DHAV get_durationEPSS 0.1%CVE-2026-40962MEDIUMFFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.cEPSS 0.1%CVE-2026-65706HIGHFFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame ProcessingEPSS 0.1%CVE-2026-65705HIGHFFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()EPSS 0.1%CVE-2026-65704HIGHFFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten DecoderEPSS 0.1%CVE-2026-70628HIGHFFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileEPSS —CVE-2026-70629MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderEPSS —CVE-2026-70631MEDIUMFFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF DecoderEPSS —CVE-2026-70630MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderEPSS —CVE-2026-70632HIGHFFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI DemuxingEPSS —