Advisories · Technology
FFmpeg.
Every CVE that names FFmpeg among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette
- FFmpeg
- Memory corruption
- CVSS 5.3 Medium
FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path
- FFmpeg
- Path traversal
- CVSS 5.3 Medium
FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling
- FFmpeg
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()
- FFmpeg
- CWE-693
- CVSS 7.1 High
FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c
- FFmpeg
- Denial of service
- CVSS 7.1 High
FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist
- FFmpeg
- Denial of service
- CVSS 5.7 Medium
FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes
- FFmpeg
- Denial of service
- CVSS 5.7 Medium
FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media
- FFmpeg
- Denial of service
- CVSS 4.8 Medium
FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer
- FFmpeg
- Memory corruption
- CVSS 6.0 Medium
FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol
- FFmpeg
- CWE-322
- CVSS 6.3 Medium
FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts
- FFmpeg
- Weak cryptography or TLS
- CVSS 6.9 Medium
Integer overflow in FFmpeg
- FFmpeg
- Memory corruption
- CVSS 5.3 Medium
FFmpeg Duration hlsproto.c parse_playlist denial of service
- FFmpeg
- Denial of service
- CVSS 5.3 Medium
FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-bounds
- FFmpeg
- Memory corruption
- CVSS 2.9 Low
Out-of-bounds read in FFmpeg
- FFmpeg
- Memory corruption
- CVSS 2.9 Low
Out-of-bounds read in FFmpeg
- FFmpeg
- Memory corruption
- CVSS 2.9 Low
Out-of-bounds read in FFmpeg
- FFmpeg
- Memory corruption
- CVSS 6.9 Medium
FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c
- FFmpeg
- Memory corruption
- CVSS 7.2 High
FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c
- FFmpeg
- Memory corruption
- CVSS 5.8 Medium
FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer
- FFmpeg
- CWE-681
- CVSS 8.5 High
FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer
- FFmpeg
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
FFmpeg Heap Buffer Overflow via RIST Protocol Reader
- FFmpeg
- Memory corruption
- CVSS 8.5 High
FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c
- FFmpeg
- Memory corruption
- CVSS 8.5 High
FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing
- FFmpeg
- Memory corruption
- CVSS 8.5 High
FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder
- FFmpeg
- Memory corruption
- CVSS 6.8 Medium
FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder
- FFmpeg
- Memory corruption
- CVSS 8.5 High
FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
- FFmpeg
- Memory corruption
- CVSS 7.7 High
FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF File
- FFmpeg
- Memory corruption
- CVSS 7.1 High
FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c
- FFmpeg
- Memory corruption
- CVSS 7.1 High
FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()
- FFmpeg
- Denial of service
- CVSS 7.7 High
FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filter
- FFmpeg
- Memory corruption
- CVSS 8.5 High
FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processing
- FFmpeg
- Memory corruption
- CVSS 7.3 High
FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()
- FFmpeg
- Memory corruption
- CVSS 7.3 High
FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoder
- FFmpeg
- Memory corruption
- CVSS 8.5 High
FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoder
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
- FFmpeg
- Denial of service
- CVSS 7.1 High
FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder
- FFmpeg
- Memory corruption
- CVSS 8.7 High
FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
- FFmpeg
- Memory corruption
- CVSS 8.8 High
FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
- FFmpeg
- Memory corruption
- CVSS 8.8 High
Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder
- FFmpeg
- Memory corruption
- CVSS 4.9 Medium
Integer overflow in FFmpeg
- FFmpeg
- Memory corruption
- CVSS 8.7 High
Heap-buffer-overflow write in FFmpeg SANM process_ftch
- FFmpeg
- Memory corruption
- CVSS 8.7 High
Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
- FFmpeg
- Memory corruption
- CVSS 8.7 High
Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
- FFmpeg
- Memory corruption
- CVSS 6.9 Medium
Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
- FFmpeg
- Memory corruption
- CVSS 5.7 Medium
Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48
- FFmpeg
- Memory corruption
- CVSS 5.7 Medium
Heap-buffer-overflow read in FFmpeg DHAV get_duration
- FFmpeg
- Memory corruption
- CVSS 7.2 High
Remote code execution via Heap Buffer Overflow in FFmpeg JPEG2000
- FFmpeg
- Memory corruption
- CVSS 5.3 Medium
FFmpeg IAMF File iamf_parse.c audio_element_obu memory leak
- FFmpeg
- Denial of service