Known Vulnerabilities for products from FFmpeg
Listed below are 20 of the newest known vulnerabilities associated with the vendor "FFmpeg".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112281 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-112280 json | Not Provided | 2026-10-19 | 2026-10-19 | |
| CVE-2026-111728 json | Not Provided | 2026-10-16 | 2026-10-16 | |
| CVE-2026-110650 json | Not Provided | 2026-10-14 | 2026-10-14 | |
| CVE-2026-110649 json | Not Provided | 2026-10-14 | 2026-10-14 | |
| CVE-2026-110645 json | Not Provided | 2026-10-14 | 2026-10-14 | |
| CVE-2026-110644 json | Not Provided | 2026-10-14 | 2026-10-14 | |
| CVE-2026-109311 json | Not Provided | 2026-10-12 | 2026-10-18 | |
| CVE-2026-107698 json | FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libav... | Not Provided | 2026-10-08 | 2026-10-15 |
| CVE-2026-107697 json | FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and a... | Not Provided | 2026-10-08 | 2026-10-15 |
| CVE-2026-107696 json | FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107695 json | FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial o... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107678 json | FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107677 json | FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infin... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107676 json | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107675 json | FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that al... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107660 json | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavform... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-96611 json | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a... | Not Provided | 2026-09-23 | 2026-10-15 |
| CVE-2026-70632 json | FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the native GoPro ... | Not Provided | 2026-08-06 | 2026-09-01 |
| CVE-2026-70631 json | FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the n... | Not Provided | 2026-08-06 | 2026-09-01 |
Known software with vulnerabilities from FFmpeg
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ffmpeg | Ffmpeg | 0.10 |
| Application | Ffmpeg | Libswresample | 3.0.101 |