ffmpeg Vulnerability Advisory Catalog

Total 443 security vulnerabilities recorded for ffmpeg software and firmware.

← Back to All Vendors
Component: ffmpeg

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c....

📅 2026-04-16
CVSS 4.9 Dossier →
Component: ffmpeg

A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input....

📅 2026-04-13
CVSS 7.5 Dossier →
Component: ffmpeg

An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Se...

📅 2026-04-13
CVSS 7.5 Dossier →
Component: ffmpeg

An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) v...

📅 2026-04-13
CVSS 7.5 Dossier →
Component: ffmpeg

Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 2267 only che...

📅 2026-03-16
CVSS 5.4 Dossier →
Component: ffmpeg

A flaw was found in FFmpeg’s TensorFlow backend within the libavfilter/dnn_backend_tf.c source file. The issue occurs in the dnn_execute_model_tf() fu...

📅 2026-02-18
CVSS 3.3 Dossier →
Component: ffmpeg

A NULL pointer dereference vulnerability exists in FFmpeg’s Firequalizer filter (libavfilter/af_firequalizer.c) due to a missing check on the return v...

📅 2026-02-18
CVSS 5.3 Dossier →
Component: ffmpeg

Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0....

📅 2025-12-18
CVSS 7.5 Dossier →
Component: ffmpeg

ffmpeg 7.1 is vulnerable to Null Pointer Dereference in function iamf_read_header in /libavformat/iamfdec.c....

📅 2025-05-02
CVSS 5.3 Dossier →
CVE-2025-1594 MEDIUM
Component: ffmpeg

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff_aac_search_for_tns of the file libavcod...

📅 2025-02-23
CVSS 6.3 Dossier →
Component: ffmpeg

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c....

📅 2025-02-18
CVSS 6.5 Dossier →
Component: ffmpeg

FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c....

📅 2025-02-18
CVSS 6.5 Dossier →
Component: ffmpeg

FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c....

📅 2025-02-18
CVSS 6.5 Dossier →
Component: ffmpeg

A vulnerability was found in FFmpeg up to 7.1. It has been rated as problematic. Affected by this issue is the function mov_read_trak of the file liba...

📅 2025-02-17
CVSS 3.3 Dossier →
CVE-2025-0518 MEDIUM
Component: ffmpeg

Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associa...

📅 2025-01-16
CVSS 5.3 Dossier →
Component: ffmpeg

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running ...

📅 2025-01-06
CVSS 7.2 Dossier →
CVE-2023-6604 MEDIUM
Component: ffmpeg

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performa...

📅 2025-01-06
CVSS 5.3 Dossier →
CVE-2023-6601 MEDIUM
Component: ffmpeg

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base6...

📅 2025-01-06
CVSS 4.7 Dossier →
Component: ffmpeg

FFmpeg n6.1.1 has a vulnerability in the DXA demuxer of the libavformat library allowing for an integer overflow, potentially resulting in a denial-of...

📅 2025-01-03
CVSS 6.2 Dossier →
Component: ffmpeg

FFmpeg version n6.1.1 has a double-free vulnerability in the fftools/ffmpeg_mux_init.c component of FFmpeg, specifically within the new_stream_audio f...

📅 2025-01-03
CVSS 8.8 Dossier →
Component: ffmpeg

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers ...

📅 2024-12-31
CVSS 7.5 Dossier →
CVE-2023-6602 MEDIUM
Component: ffmpeg

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files i...

📅 2024-12-31
CVSS 5.3 Dossier →
CVE-2024-35368 CRITICAL
Component: ffmpeg

FFmpeg n7.0 is affected by a Double Free via the rkmpp_retrieve_frame function within libavcodec/rkmppdec.c....

📅 2024-11-29
CVSS 9.8 Dossier →
CVE-2024-35367 CRITICAL
Component: ffmpeg

FFmpeg n6.1.1 has an Out-of-bounds Read via libavcodec/ppc/vp8dsp_altivec.c, static const vec_s8 h_subpel_filters_outer...

📅 2024-11-29
CVSS 9.1 Dossier →
Page 1 of 19 (443 Total Records)