agentprime: ffmpegEvery new CVE for ffmpeg.https://agentprime.io/CVE-2026-120247: FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosurehttps://agentprime.io/advisories/CVE-2026-120247/https://agentprime.io/advisories/CVE-2026-120247/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:12 GMTCVECVE-2026-120246: FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoderhttps://agentprime.io/advisories/CVE-2026-120246/https://agentprime.io/advisories/CVE-2026-120246/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:11 GMTCVECVE-2026-120245: FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoderhttps://agentprime.io/advisories/CVE-2026-120245/https://agentprime.io/advisories/CVE-2026-120245/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:10 GMTCVECVE-2026-120244: FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoderhttps://agentprime.io/advisories/CVE-2026-120244/https://agentprime.io/advisories/CVE-2026-120244/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:10 GMTCVECVE-2026-120243: FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palettehttps://agentprime.io/advisories/CVE-2026-120243/https://agentprime.io/advisories/CVE-2026-120243/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 01 Nov 2026 00:57:09 GMTCVECVE-2026-120210: FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Pathhttps://agentprime.io/advisories/CVE-2026-120210/https://agentprime.io/advisories/CVE-2026-120210/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 17:25:56 GMTCVECVE-2026-107698: FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handlinghttps://agentprime.io/advisories/CVE-2026-107698/https://agentprime.io/advisories/CVE-2026-107698/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 17:30:28 GMTCVECVE-2026-107697: FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()https://agentprime.io/advisories/CVE-2026-107697/https://agentprime.io/advisories/CVE-2026-107697/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 17:30:28 GMTCVECVE-2026-107696: FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.chttps://agentprime.io/advisories/CVE-2026-107696/https://agentprime.io/advisories/CVE-2026-107696/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 17:30:27 GMTCVECVE-2026-107695: FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlisthttps://agentprime.io/advisories/CVE-2026-107695/https://agentprime.io/advisories/CVE-2026-107695/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 17:30:26 GMTCVECVE-2026-107678: FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxeshttps://agentprime.io/advisories/CVE-2026-107678/https://agentprime.io/advisories/CVE-2026-107678/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 15:28:43 GMTCVECVE-2026-107677: FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Mediahttps://agentprime.io/advisories/CVE-2026-107677/https://agentprime.io/advisories/CVE-2026-107677/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 15:28:42 GMTCVECVE-2026-107676: FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializerhttps://agentprime.io/advisories/CVE-2026-107676/https://agentprime.io/advisories/CVE-2026-107676/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 15:28:41 GMTCVECVE-2026-107675: FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocolhttps://agentprime.io/advisories/CVE-2026-107675/https://agentprime.io/advisories/CVE-2026-107675/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 15:28:41 GMTCVECVE-2026-107660: FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hostshttps://agentprime.io/advisories/CVE-2026-107660/https://agentprime.io/advisories/CVE-2026-107660/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 15:28:40 GMTCVECVE-2026-96611: Integer overflow in FFmpeghttps://agentprime.io/advisories/CVE-2026-96611/https://agentprime.io/advisories/CVE-2026-96611/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 14:18:54 GMTCVECVE-2026-90816: FFmpeg Duration hlsproto.c parse_playlist denial of servicehttps://agentprime.io/advisories/CVE-2026-90816/https://agentprime.io/advisories/CVE-2026-90816/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 20:00:05 GMTCVECVE-2026-90815: FFmpeg Convolution Filter vf_convolution.c setup_3x3 out-of-boundshttps://agentprime.io/advisories/CVE-2026-90815/https://agentprime.io/advisories/CVE-2026-90815/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 19:45:05 GMTCVECVE-2026-52297: Out-of-bounds read in FFmpeghttps://agentprime.io/advisories/CVE-2026-52297/https://agentprime.io/advisories/CVE-2026-52297/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 00:00:00 GMTCVECVE-2026-52296: Out-of-bounds read in FFmpeghttps://agentprime.io/advisories/CVE-2026-52296/https://agentprime.io/advisories/CVE-2026-52296/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 00:00:00 GMTCVECVE-2026-52295: Out-of-bounds read in FFmpeghttps://agentprime.io/advisories/CVE-2026-52295/https://agentprime.io/advisories/CVE-2026-52295/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 00:00:00 GMTCVECVE-2026-75147: FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.chttps://agentprime.io/advisories/CVE-2026-75147/https://agentprime.io/advisories/CVE-2026-75147/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:29:03 GMTCVECVE-2026-75146: FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.chttps://agentprime.io/advisories/CVE-2026-75146/https://agentprime.io/advisories/CVE-2026-75146/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:28:19 GMTCVECVE-2026-75145: FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizerhttps://agentprime.io/advisories/CVE-2026-75145/https://agentprime.io/advisories/CVE-2026-75145/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:27:33 GMTCVECVE-2026-75144: FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizerhttps://agentprime.io/advisories/CVE-2026-75144/https://agentprime.io/advisories/CVE-2026-75144/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:26:53 GMTCVECVE-2026-75143: FFmpeg Heap Buffer Overflow via RIST Protocol Readerhttps://agentprime.io/advisories/CVE-2026-75143/https://agentprime.io/advisories/CVE-2026-75143/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:26:12 GMTCVEcriticalCVE-2026-75142: FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.chttps://agentprime.io/advisories/CVE-2026-75142/https://agentprime.io/advisories/CVE-2026-75142/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:24:57 GMTCVECVE-2026-75141: FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxinghttps://agentprime.io/advisories/CVE-2026-75141/https://agentprime.io/advisories/CVE-2026-75141/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 16:24:01 GMTCVECVE-2026-70632: FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxinghttps://agentprime.io/advisories/CVE-2026-70632/https://agentprime.io/advisories/CVE-2026-70632/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:26:17 GMTCVECVE-2026-70631: FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoderhttps://agentprime.io/advisories/CVE-2026-70631/https://agentprime.io/advisories/CVE-2026-70631/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:25:53 GMTCVECVE-2026-70630: FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoderhttps://agentprime.io/advisories/CVE-2026-70630/https://agentprime.io/advisories/CVE-2026-70630/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:25:31 GMTCVECVE-2026-70629: FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoderhttps://agentprime.io/advisories/CVE-2026-70629/https://agentprime.io/advisories/CVE-2026-70629/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:25:08 GMTCVECVE-2026-70628: FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV Filehttps://agentprime.io/advisories/CVE-2026-70628/https://agentprime.io/advisories/CVE-2026-70628/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 21:24:15 GMTCVECVE-2026-66041: FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filterhttps://agentprime.io/advisories/CVE-2026-66041/https://agentprime.io/advisories/CVE-2026-66041/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 19:54:11 GMTCVECVE-2026-66040: FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoderhttps://agentprime.io/advisories/CVE-2026-66040/https://agentprime.io/advisories/CVE-2026-66040/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 19:46:25 GMTCVECVE-2026-66039: FFmpeg MACE6 Audio Decoder Heap Out-of-Bounds Write via CAF Filehttps://agentprime.io/advisories/CVE-2026-66039/https://agentprime.io/advisories/CVE-2026-66039/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 19:42:42 GMTCVECVE-2026-66038: FFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.chttps://agentprime.io/advisories/CVE-2026-66038/https://agentprime.io/advisories/CVE-2026-66038/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 19:39:27 GMTCVECVE-2026-66037: FFmpeg IAMF Demuxer Uncontrolled Resource Consumption via mix_presentation_obu()https://agentprime.io/advisories/CVE-2026-66037/https://agentprime.io/advisories/CVE-2026-66037/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 19:36:53 GMTCVECVE-2026-66036: FFmpeg Heap Out-of-Bounds Write in vf_hqdn3d Filterhttps://agentprime.io/advisories/CVE-2026-66036/https://agentprime.io/advisories/CVE-2026-66036/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 19:34:16 GMTCVECVE-2026-65706: FFmpeg 3.0 - 8.1.2 vf_swaprect Out-of-Bounds Write via NV12 Frame Processinghttps://agentprime.io/advisories/CVE-2026-65706/https://agentprime.io/advisories/CVE-2026-65706/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 19:05:11 GMTCVECVE-2026-65705: FFmpeg 3.4 - 8.1.2 vf_floodfill Out-of-Bounds Write via filter_frame()https://agentprime.io/advisories/CVE-2026-65705/https://agentprime.io/advisories/CVE-2026-65705/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 19:00:36 GMTCVECVE-2026-65704: FFmpeg 8.1.2 Out-of-Bounds Write via TY Demuxer and Shorten Decoderhttps://agentprime.io/advisories/CVE-2026-65704/https://agentprime.io/advisories/CVE-2026-65704/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 18:55:41 GMTCVECVE-2026-65703: FFmpeg 2.7 - 8.1.2 Out-of-Bounds Write in TDSC Video Decoderhttps://agentprime.io/advisories/CVE-2026-65703/https://agentprime.io/advisories/CVE-2026-65703/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 18:52:19 GMTCVECVE-2026-64835: FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoderhttps://agentprime.io/advisories/CVE-2026-64835/https://agentprime.io/advisories/CVE-2026-64835/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 17:24:05 GMTCVECVE-2026-64834: FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxerhttps://agentprime.io/advisories/CVE-2026-64834/https://agentprime.io/advisories/CVE-2026-64834/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 17:06:07 GMTCVECVE-2026-64833: FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.chttps://agentprime.io/advisories/CVE-2026-64833/https://agentprime.io/advisories/CVE-2026-64833/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 17:03:20 GMTCVECVE-2026-64832: FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.chttps://agentprime.io/advisories/CVE-2026-64832/https://agentprime.io/advisories/CVE-2026-64832/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 17:01:16 GMTCVECVE-2026-64831: FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoderhttps://agentprime.io/advisories/CVE-2026-64831/https://agentprime.io/advisories/CVE-2026-64831/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 16:35:43 GMTCVECVE-2026-64830: FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxerhttps://agentprime.io/advisories/CVE-2026-64830/https://agentprime.io/advisories/CVE-2026-64830/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Jul 2026 16:33:05 GMTCVECVE-2026-58049: FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()https://agentprime.io/advisories/CVE-2026-58049/https://agentprime.io/advisories/CVE-2026-58049/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 Jun 2026 01:32:52 GMTCVE