Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-125189MEDIUMFFmpeg 8.1 through 9.0.2 Denial of Service via lcevc_metadata Bitstream FilterEPSS —CVE-2026-125261MEDIUMFFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.cEPSS —CVE-2026-125241HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via FLIC Decoder check_pixel_ptrEPSS —CVE-2026-125233HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via DVB Subtitle EncoderEPSS —CVE-2026-125231MEDIUMFFmpeg 4.4 through 9.0.2 NULL Pointer Dereference via adx_decode_header()EPSS —CVE-2026-125070MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference in EA TQI DecoderEPSS —CVE-2026-125178MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Heap Read via TDSC Cursor DimensionsEPSS —CVE-2026-125228MEDIUMFFmpeg before 8.1.3 and 9.x before 9.0.2 Out-of-Bounds Read in Vorbis EncoderEPSS —CVE-2026-125223MEDIUMFFmpeg 8.0 through 9.0.2 Memory Leak in VP9 Decoder via vp9_decode_frameEPSS —CVE-2026-125170MEDIUMFFmpeg through 9.0.2 Uninitialized Memory Disclosure via targa_decode_rle()EPSS —CVE-2026-125250HIGHFFmpeg through 9.0.2 GIF Encoder Heap Buffer Overflow via shrunk_buf RemapEPSS —CVE-2026-125066MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference in CLJR Video DecoderEPSS —CVE-2026-125229HIGHFFmpeg through 9.0.2 Out-of-Bounds Memory Access in Huffyuv/FFVHUFF Median PredictorEPSS —CVE-2026-125196HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via liboapv APV Encoder WrapperEPSS —CVE-2026-125064MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference in G.726 ADPCM DecoderEPSS —CVE-2026-125232MEDIUMFFmpeg through 9.0.2 Division by Zero in B-frame Motion EstimationEPSS —CVE-2026-125209HIGHFFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow via dvdsubenc.cEPSS —CVE-2026-125188LOWFFmpeg through 9.0.2 ProRes prores_aw Heap Out-of-Bounds Read in Interlaced EncodingEPSS —CVE-2026-125249HIGHFFmpeg 7.1 through 9.0.2 Heap Out-of-Bounds Write via Vulkan Slice Buffer SizingEPSS —CVE-2026-125173MEDIUMFFmpeg through 9.0.2 Memory Leak in libxevd EVC Decoder WrapperEPSS —