Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-70629MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC DecoderEPSS 0.2%CVE-2026-70630MEDIUMFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso DecoderEPSS 0.2%CVE-2025-59730MEDIUMHeap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48EPSS 0.2%CVE-2025-59729MEDIUMHeap-buffer-overflow read in FFmpeg DHAV get_durationEPSS 0.2%CVE-2026-75145MEDIUMFFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP PacketizerEPSS 0.2%CVE-2026-52296LOWFFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.EPSS 0.2%CVE-2026-70628HIGHFFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV FileEPSS 0.1%CVE-2026-107676MEDIUMFFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata SerializerEPSS 0.1%CVE-2026-107677MEDIUMFFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate MediaEPSS 0.1%CVE-2026-107660MEDIUMFFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP HostsEPSS 0.1%CVE-2026-40962MEDIUMFFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.cEPSS 0.1%CVE-2026-120244MEDIUMFFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX DecoderEPSS 0.1%CVE-2026-120245MEDIUMFFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster DecoderEPSS 0.1%CVE-2026-120247MEDIUMFFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory DisclosureEPSS 0.1%CVE-2026-120243MEDIUMFFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf PaletteEPSS 0.1%CVE-2026-120246MEDIUMFFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM DecoderEPSS 0.1%CVE-2026-75147MEDIUMFFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.cEPSS 0.1%CVE-2026-52297LOWFFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libEPSS 0.1%CVE-2026-96611MEDIUMFFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF iEPSS 0.1%CVE-2026-107678MEDIUMFFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh BoxesEPSS 0.1%