Known Vulnerabilities for products from Ffmpeg
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Ffmpeg".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126188 json | Not Provided | 2026-11-11 | 2026-11-12 | |
| CVE-2026-126186 json | Not Provided | 2026-11-10 | 2026-11-12 | |
| CVE-2026-125270 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-125269 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-125268 json | Not Provided | 2026-11-09 | 2026-11-10 | |
| CVE-2026-125267 json | Not Provided | 2026-11-09 | 2026-11-10 | |
| CVE-2026-125266 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-125265 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-125264 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-125263 json | Not Provided | 2026-11-09 | 2026-11-09 | |
| CVE-2026-107698 json | FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libav... | Not Provided | 2026-10-08 | 2026-10-15 |
| CVE-2026-107697 json | FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and a... | Not Provided | 2026-10-08 | 2026-10-15 |
| CVE-2026-107696 json | FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107695 json | FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial o... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107678 json | FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107677 json | FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infin... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107676 json | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107675 json | FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that al... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-107660 json | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavform... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-96611 json | FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a... | Not Provided | 2026-09-23 | 2026-10-15 |
Known software with vulnerabilities from Ffmpeg
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Ffmpeg | Ffmpeg | 0.10 |
| Application | Ffmpeg | Libswresample | 3.0.101 |