Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-125102MEDIUMFFmpeg through 9.0.2 TAK Decoder Uninitialized Memory Disclosure via takdec.cEPSS —CVE-2026-125252MEDIUMFFmpeg through 9.0.2 VAAPI Memory Leak via Abandoned Picture BuffersEPSS —CVE-2026-125199MEDIUMFFmpeg through 9.0.2 Memory Leak in VC-1 Decoder via vc1_decode_frame()EPSS —CVE-2026-125234MEDIUMFFmpeg through 9.0.2 WavPack Encoder Integer Overflow Infinite Loop via wavpack_encode_initEPSS —CVE-2026-125179MEDIUMFFmpeg through 9.0.2 Heap Memory Disclosure via VQA Video DecoderEPSS —CVE-2026-125099MEDIUMFFmpeg through 9.0.2 Uninitialized Memory Disclosure via GEM Raster DecoderEPSS —CVE-2026-125221MEDIUMFFmpeg through 9.0.2 Uncontrolled Recursion in FLAC Parser score_header()EPSS —CVE-2026-125230MEDIUMFFmpeg through 9.0.2 Integer Overflow Division by Zero via pcm_rechunk FilterEPSS —CVE-2026-125213HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via PSD Decoder RLE PathEPSS —CVE-2026-125248HIGHFFmpeg 9.0 through 9.0.2 Integer Overflow via FFV1 Vulkan Encoder Remap BufferEPSS —CVE-2026-125219HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VDPAU Tile ArraysEPSS —CVE-2026-125067MEDIUMFFmpeg through 9.0.2 VBLE Decoder NULL Pointer Dereference via vble_decode_frame()EPSS —CVE-2026-125180MEDIUMFFmpeg 8.1 through 9.0.2 EXIF Parser Memory Exhaustion via Overlapping TagsEPSS —CVE-2026-125174MEDIUMFFmpeg before 8.1.3 and 9.x before 9.0.2 NULL Pointer Dereference via ff_hap_set_chunk_count()EPSS —CVE-2026-125069MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference via Motion Pixels DecoderEPSS —CVE-2026-125214HIGHFFmpeg through 9.0.2 Heap Buffer Overflow in Blu-ray PCM DecoderEPSS —CVE-2026-125104MEDIUMFFmpeg through 9.0.2 Memory Exhaustion DoS via APE Decoder apedec.cEPSS —CVE-2026-125182MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Read via Cook Decoder js_subband_startEPSS —CVE-2026-125101MEDIUMFFmpeg through 9.0.2 VMnc Decoder Uninitialized Heap Memory DisclosureEPSS —CVE-2026-125184MEDIUMFFmpeg 6.1 through 9.0.2 Information Disclosure via CamStudio Decoder cscd.cEPSS —