Vulnerabilidades em FFmpeg
181 resultadosAnálise Vexday
FFmpeg apresenta 28 vulnerabilidades catalogadas, com 18 divulgadas nos últimos 90 dias, indicando ritmo acelerado de descobertas. Nenhuma está sob exploração ativa confirmada (KEV) e não há críticas com CVSS máximo, mas a fraqueza dominante (CWE-787 – buffer overflow) permanece crítica e exige atenção em processos de atualização. O volume recente de vulnerabilidades reflete a complexidade do software e demanda monitoramento contínuo, especialmente em ambientes que processam mídia não validada.
CVE-2026-125244HIGHFFmpeg before 8.1.3 and 9.x before 9.0.2 VVC Decoder Out-of-Bounds Write via sh_entry_pointsEPSS —CVE-2026-125220MEDIUMFFmpeg through 9.0.2 Mimic Decoder Deadlock via Frame Threading FailureEPSS —CVE-2026-125097MEDIUMFFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure via rawdec.c Raw Video DecoderEPSS —CVE-2026-125186MEDIUMFFmpeg through 9.0.2 CPU Exhaustion via dts2pts Bitstream FilterEPSS —CVE-2026-125246MEDIUMFFmpeg through 9.0.2 Assertion Failure DoS via cbs_jpeg_assemble_fragmentEPSS —CVE-2026-125202HIGHFFmpeg through 9.0.2 Heap Buffer Overflow via HEVC VAAPI Tile ArraysEPSS —CVE-2026-125171MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Read in Musepack SV7 Decoder via mpc7.cEPSS —CVE-2026-125192MEDIUMFFmpeg through 9.0.2 Heap Memory Disclosure via DXA Decoder Uninitialized BufferEPSS —CVE-2026-125181HIGHFFmpeg through 9.0.2 FLIC Decoder Out-of-Bounds Write via FLI_BRUN Byte SwapEPSS —CVE-2026-125251HIGHFFmpeg through 9.0.2 VVC Decoder Heap Out-of-Bounds Write via refs.cEPSS —CVE-2026-125096MEDIUMFFmpeg through 9.0.2 Uninitialized Memory Disclosure via Tiertex SEQ DecoderEPSS —CVE-2026-125235HIGHFFmpeg through 9.0.2 Heap Overflow via QSV Encoder submit_frame()EPSS —CVE-2026-125193MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Read via bitpacked_decode_uyvy422()EPSS —CVE-2026-125243MEDIUMFFmpeg through 9.0.2 Uninitialized Memory Disclosure via JPEG-LS DecoderEPSS —CVE-2026-125172MEDIUMFFmpeg through 9.0.2 Out-of-Bounds Read via libxevd EVC NAL LengthEPSS —CVE-2026-125198LOWFFmpeg through 9.0.2 Memory Leak via MediaCodec JNI setBufferEPSS —CVE-2026-125267HIGHFFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC DecoderEPSS —CVE-2026-125225MEDIUMFFmpeg through 9.0.2 NULL Pointer Dereference via aac_adtstoasc Bitstream FilterEPSS —CVE-2026-125264MEDIUMFFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC CountEPSS —CVE-2026-125187MEDIUMFFmpeg through 9.0.2 TTA Encoder Reachable Assertion via tta_encode_frame()EPSS —