Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-125202HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile ArraysEPSS —CVE-2026-125246MEDIUMFFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragmentEPSS —CVE-2026-125218HIGHFFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()EPSS —CVE-2026-125098MEDIUMFFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH ChunkEPSS —CVE-2026-125186MEDIUMFFmpeg through 9.0.2 CPU Exhaustion via dts2pts Bitstream FilterEPSS —CVE-2026-125097MEDIUMFFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via rawdec.c Raw Video DecoderEPSS —CVE-2026-125257HIGHFFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis SearchEPSS —CVE-2026-125207MEDIUMFFmpeg through 9.0.2 Excessive Memory Allocation via Interplay ACM DecoderEPSS —CVE-2026-125205MEDIUMFFmpeg through 9.0.2 Memory Exhaustion via av1_frame_merge Bitstream FilterEPSS —CVE-2026-125220MEDIUMFFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading FailureEPSS —CVE-2026-125244HIGHFFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_pointsEPSS —CVE-2026-125184MEDIUMFFmpeg 6.1 through 9.0.2 Information Disclosure via CamStudio Decoder cscd.cEPSS —CVE-2026-125269HIGHFFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.cEPSS —CVE-2026-125101MEDIUMFFmpeg through 9.0.2 VMnc Decoder Uninitialized Heap Memory DisclosureEPSS —CVE-2026-125182MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Read via Cook Decoder js_subband_startEPSS —CVE-2026-125104MEDIUMFFmpeg through 9.0.2 Memory Exhaustion DoS via APE Decoder apedec.cEPSS —CVE-2026-125214HIGHFFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM DecoderEPSS —CVE-2026-125071MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference in JV Video DecoderEPSS —CVE-2026-125259HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks EncoderEPSS —CVE-2026-125226MEDIUMFFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen DemuxerEPSS —