Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-125258MEDIUMFFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.cEPSS —CVE-2026-125103MEDIUMFFmpeg through 9.0.2 Uninitialized Heap Disclosure via MLZ Decompressor in ALS DecoderEPSS —CVE-2026-125256HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes RoutineEPSS —CVE-2026-125265MEDIUMFFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream PointerEPSS —CVE-2026-125215MEDIUMFFmpeg 7.1 through 9.0.2 NULL Pointer Dereference via ff_dovi_rpu_generate()EPSS —CVE-2026-125183MEDIUMFFmpeg through 9.0.2 Denial of Service via HEVC PPS 3D Extension ParsingEPSS —CVE-2026-125260HIGHFFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE PathEPSS —CVE-2026-125237MEDIUMFFmpeg 8.1 through 9.0.2 Denial of Service via DPX Vulkan Hwaccel Error PathEPSS —CVE-2026-125227HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via cbs_jpeg_write_scan Integer OverflowEPSS —CVE-2026-125195LOWFFmpeg through 9.0.2 Uninitialized Memory Disclosure via ADPCM_MS Trellis EncodingEPSS —CVE-2026-125194MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Read via PCM DVD EncoderEPSS —CVE-2026-125190MEDIUMFFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via MVC2 DecoderEPSS —CVE-2026-125210HIGHFFmpeg through 9.0.2 Heap Overflow in libaribcaption Text Subtitle DecodingEPSS —CVE-2026-125224MEDIUMFFmpeg through 9.0.2 Vorbis Parser CPU Exhaustion via Invalid ExtradataEPSS —CVE-2026-125236MEDIUMFFmpeg through 9.0.2 VVC Decoder Memory Leak via alloc_frame()EPSS —CVE-2026-125175MEDIUMFFmpeg through 9.0.2 Information Disclosure via Flash Screen Video DecoderEPSS —CVE-2026-125240MEDIUMFFmpeg through 9.0.2 Resource Leak in libsvtjpegxs JPEG XS Decoder WrapperEPSS —CVE-2026-125176MEDIUMFFmpeg through 9.0.2 Uninitialized Memory Read in Flash Screen Video 2 DecoderEPSS —CVE-2026-125208HIGHFFmpeg through 9.0.2 V4L2 M2M Encoder Out-of-Bounds Write in v4l2_buffers.cEPSS —CVE-2026-125254MEDIUMFFmpeg through 9.0.2 Division by Zero via VVC ff_vvc_slice_rpl()EPSS —