Log in Start free

FFMPEG

Products

ProductCVEsExploitedLatest
FFMPEG59–Nov 1, 2026
MPEG-DASH1–Oct 6, 2025

Exploited and recent CVEs

  • CVE-2026-120247 Medium 5.5 FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure 0.1%
  • CVE-2026-120246 Medium 5.5 FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder 0.1%
  • CVE-2026-120245 Medium 5.5 FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder 0.1%
  • CVE-2026-120244 Medium 5.5 FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder 0.1%
  • CVE-2026-120243 Medium 5.5 FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette 0.1%
  • CVE-2026-120210 Medium 4.3 FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path 0.3%
  • CVE-2026-107698 Medium 5.4 FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling 0.3%
  • CVE-2026-107697 Medium 4.3 FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist() 0.3%
  • CVE-2026-107696 Medium 6.5 FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c 0.4%
  • CVE-2026-107695 Medium 6.5 FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist 0.5%
  • CVE-2026-107678 Medium 4.7 FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes <0.1%
  • CVE-2026-107677 Medium 4.7 FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media 0.1%
  • CVE-2026-107676 Low 3.3 FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer 0.1%
  • CVE-2026-107675 Medium 5.9 FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol 0.2%
  • CVE-2026-107660 Medium 4.8 FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts 0.1%
  • CVE-2026-96611 Medium 6.9 FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds che 0.1%
  • CVE-2026-52297 Low 2.9 FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libavformat/mov.c. 0.1%
  • CVE-2026-52296 Low 2.9 FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. 0.2%
  • CVE-2026-52295 Low 2.9 FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in libavformat/iamf_writer.c. 0.2%
  • CVE-2026-75147 High 7.1 FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c 0.1%
  • CVE-2026-75146 High 8.1 FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c 0.3%
  • CVE-2026-75145 Medium 5.8 FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer 0.2%
  • CVE-2026-75144 High 7.8 FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer 0.2%
  • CVE-2026-75143 Critical 9.8 FFmpeg Heap Buffer Overflow via RIST Protocol Reader 0.7%
  • CVE-2026-75142 High 7.8 FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c 0.2%
  • CVE-2026-75141 High 7.8 FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing 0.2%
  • CVE-2026-70632 High 7.8 FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing 0.2%
  • CVE-2026-70631 Medium 5.5 FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder 0.2%
  • CVE-2026-70630 Medium 5.5 FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder 0.2%
  • CVE-2026-70629 Medium 5.5 FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder 0.2%