Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-125177MEDIUMFFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via MSCC/SRGC DecoderEPSS —CVE-2026-125203HIGHFFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Buffer Overflow in Cook Multichannel DecoderEPSS —CVE-2026-125226MEDIUMFFmpeg through 9.0.2 Excessive Memory Allocation via SBaGen DemuxerEPSS —CVE-2026-125205MEDIUMFFmpeg through 9.0.2 Memory Exhaustion via av1_frame_merge Bitstream FilterEPSS —CVE-2026-125100MEDIUMFFmpeg through 9.0.2 Integer Overflow in OpenEXR Decoder Tile CountEPSS —CVE-2026-125073MEDIUMFFmpeg through 9.0.2 Infinite Loop Denial of Service via IMC/IAC DecoderEPSS —CVE-2026-125065MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference via TGV Decoder eatgv.cEPSS —CVE-2026-125197MEDIUMFFmpeg through 9.0.2 Heap Out-of-Bounds Read via LCL/ZLIB Multithread DecodingEPSS —CVE-2026-125259HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks EncoderEPSS —CVE-2026-125207MEDIUMFFmpeg through 9.0.2 Excessive Memory Allocation via Interplay ACM DecoderEPSS —CVE-2026-125098MEDIUMFFmpeg through 9.0.2 WebP Decoder Information Disclosure via Short ALPH ChunkEPSS —CVE-2026-125200MEDIUMFFmpeg through 9.0.2 Memory Leak via libx265 Dolby Vision RPU PayloadsEPSS —CVE-2026-125217MEDIUMFFmpeg through 9.0.2 RoQ DPCM Encoder Uninitialized Heap Memory DisclosureEPSS —CVE-2026-125268MEDIUMFFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD DecoderEPSS —CVE-2026-125095MEDIUMFFmpeg through 9.0.2 C93 Decoder Uninitialized Stack Memory DisclosureEPSS —CVE-2026-125071MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference in JV Video DecoderEPSS —CVE-2026-125269HIGHFFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.cEPSS —CVE-2026-125257HIGHFFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis SearchEPSS —CVE-2026-125218HIGHFFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()EPSS —CVE-2026-125247MEDIUMFFmpeg through 9.0.2 Integer Overflow via dng_decode_tiles() in libavcodec/tiff.cEPSS —