Known vulnerabilities in FFmpeg

Software: FFmpeg
Software CPE: cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 342
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FFmpeg FFmpeg is affected by 342 known vulnerabilities: 148 high, 148 medium, 46 low Critical High Medium Low

Vulnerabilities (342)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135067 - Out-of-bounds read
CVE-2026-30997
CWE-125 Medium
No
No
8.0.2 23.06.2026 SB2026062341
SB2026062343
SB2026062344
#VU135066 - Out-of-bounds write
CVE-2026-8461
CWE-787 High
No
No
4.4.8, 5.1.10, 6.1.6, 7.1.5, 8.0.3, 8.1.2 23.06.2026 SB2026062342
SB2026062343
SB2026081820
#VU118789 - Out-of-bounds write
CVE-2025-59728
CWE-787 Low
No
No
8.0 26.11.2025 SB2025112653
SB2025112654
SB2025112655
and 2 more
#VU117665 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-6605
CWE-611 Low
No
No
- 27.10.2025 SB2025102710
SB2025102719
#VU117664 - Heap-based Buffer Overflow
CVE-2025-9951
CWE-122 High
No
No
8.0 27.10.2025 SB2025102709
SB2025102719
#VU117663 - NULL Pointer Dereference
CVE-2025-10256
CWE-476 Low
No
No
- 27.10.2025 SB2025102708
SB2025102719
SB2026072205
#VU117662 - NULL Pointer Dereference
CVE-2023-6603
CWE-476 Low
No
No
- 27.10.2025 SB2025102708
SB2025102719
SB2025112728
#VU117351 - Out-of-bounds read
CVE-2024-35367
CWE-125 Medium
No
No
7.0 17.10.2025 SB2025101752
SB2025101753
SB2025101760
and 1 more
#VU117350 - Integer overflow
CVE-2024-35366
CWE-190 High
No
No
7.0 17.10.2025 SB2025101752
SB2025101753
SB2024120682
#VU115966 - NULL Pointer Dereference
CVE-2025-7700
CWE-476 Medium
No
No
- 19.09.2025 SB20250919148
SB20250919153
SB20250919154
and 9 more
#VU114804 - Memory corruption
CVE-2025-1594
CWE-119 High
No
No
7.1.1 04.09.2025 SB2025090460
SB2025090471
SB2025092101
#VU110557 - Divide By Zero
CVE-2013-0894
CWE-369 Low
No
No
1.1.4 08.06.2025 SB2025060830
#VU110563 - Memory corruption
CVE-2012-5361
CWE-119 High
No
No
0.11 09.02.2018 SB2025060826
#VU43594 - Improper input validation
CVE-2012-2793
CWE-20 High
No
No
0.11 11.09.2012 SB2025060823
#VU43595 - Improper input validation
CVE-2012-2794
CWE-20 High
No
No
0.11 11.09.2012 SB2025060824
#VU43597 - Improper input validation
CVE-2012-2796
CWE-20 High
No
No
0.11 11.09.2012 SB2025060825
#VU43683 - Memory corruption
CVE-2011-4579
CWE-119 Low
No
No
0.11 20.08.2012 SB2025060826
#VU43685 - Improper input validation
CVE-2011-4352
CWE-20 Medium
No
No
0.5.7, 0.6.4, 0.7.9, 0.8.8 20.08.2012 SB2025060827
#VU43686 - Memory corruption
CVE-2011-4353
CWE-119 Low
No
No
0.5.7, 0.6.4, 0.7.9, 0.8.8 20.08.2012 SB2025060828
#VU43687 - Memory corruption
CVE-2011-4364
CWE-119 Medium
No
No
0.5.7, 0.6.4, 0.7.9, 0.8.8 20.08.2012 SB2025060829


Showing elements 1 - 20 out of 342