Known vulnerabilities in FFmpeg
Vendor:
ffmpeg.sourceforge.net
Software:
FFmpeg
Software CPE:
cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:*:*:*:*:*:*:*:*
Total vulnerabilities:
342
Public exploits:
4
Known exploited (KEV):
0
Breakdown by Severity Chart
8.1.3
9.0.2
9.0.1
9.0
4.4.8
5.1.10
6.1.6
7.1.5
8.0.3
8.1.2
6.1.5
5.1.9
4.4.7
7.1.4
8.1.1
8.0.2
8.1
8
5.1.8
6.1.4
7.1.3
8.0.1
1.12.0
7.1.2
8.0
6.1.3
5.1.7
7.0.3
4.2.11
4.4.6
3.4.14
4.3.9
7.1.1
7.1
4.3.8
5.1.6
7.0.2
6.1.2
4.2.10
4.4.5
4.3.7
5.1.5
7.0.1
6.1.1
6.1
6.0.1
5.1.4
2.8.22
3.4.13
4.1.11
4.2.9
4.3.6
4.4.4
5.0.3
5.1.3
6.0
5.0.2
2.8.21
3.2.19
3.4.12
4.1.10
4.2.8
4.3.5
4.4.3
5.1.2
5.1.1
5.1
3.2.18
2.8.20
3.4.11
4.2.7
2.8.19
3.2.17
3.4.10
4.1.9
4.2.6
4.3.4
4.4.2
5.0.1
5.0
4.4.1
4.3.3
2.8.18
4.1.8
3.2.16
4.2.5
3.4.9
4.1.7
4.4
4.3.2
7.0
13_dev0
4.3.1
4.3
4.2.4
4.2.3
4.2.1
4.2
4.1.6
4.1.5
4.1.4
4.0.6
4.0.5
4.0
3.4.8
3.4.7
3.4.5
3.3.8
3.3
3.2.15
3.2.14
3.2.12
3.2.11
3.1.10
3.0.12
2.8.17
2.8.16
2.8.15
2.8.13
2.8.12
2.8.11
2.8.10
2.8.7
2.8.6
2.7.6
2.7.5
2.6.8
2.6.7
2.5.10
2.4.13
1.2.11
1.2.10
1.2.9
1.2.8
1.2.2
1.1.15
1.1.14
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
0.10.16
0.10.14
0.10.13
0.10.12
0.10.11
0.10.10
0.10.9
0.10.8
0.10.7
0.10.6
0.10.5
0.8
4.2.2
3.0
3.1
3.2
2.8.9
4.1.3
4.1.2
4.1.1
4.0.4
4.0.3
3.4.6
3.3.9
3.2.13
0.5.14
0.5.13
0.5.12
0.5.11
0.5.10
0.5.9
0.5.8
0.5.7
4.1
4.0.2
4.0.1
4.0.0
3.4.4
3.4.3
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8
3.0.9
3.1.3
3.1.4
3.1.5
3.1.6
3.1.7
3.1.8
3.1.9
3.2.1
3.2.2
3.2.3
3.2.4
3.2.5
3.2.6
3.2.7
3.2.8
3.2.9
3.3.7
3.4.1
3.4.0
3.3.5
3.3.3
3.3.2
3.3.1
3.3.0
3.2.0
3.1.2
3.1.1
3.1.0
3.0.11
3.0.0
2.8.14
2.8.8
2.7.7
2.6.9
2.5.11
2.4.14
2.3.0
2.1.0
2.0.0
1.2.12
1.2.0
1.1.16
1.1.0
1.0.10
1.0.0
0.11.5
0.11.0
0.10.2
0.10.1
0.10.0
0.9.4
0.9.3
0.9.2
0.9.0
0.8.15
0.8.14
0.8.13
0.8.12
0.8.9
0.8.4
0.8.3
0.7.17
0.7.16
0.7.15
0.7.14
0.7.13
0.7.10
0.7.0
0.6.7
0.6.6
0.6.5
0.6.4
0.6.0
0.5.15
0.5.6
3.0.10
3.1.11
3.2.10
3.3.6
3.4.2
3.4
3.3.4
0.10.15
2.8.5
2.6.2
2.6.3
2.0.7
2.4.10
2.4.12
2.4.11
2.7
2.6
2.5
2.4.8
2.6.6
2.8.4
2.4.9
2.6.5
2.8
2.1.7
2.1.8
2.3.6
2.1.6
2.3.1
2.2.15
2.2.16
2.5.9
2.5.7
2.5.8
2.7.3
2.5.6
2.7.4
2.8.3
2.7.0
2.8.2
2.6.4
2.8.0
2.7.2
2.7.1
2.8.1
2.2.3
2.4.0
2.2.2
2.2.1
2.2.0
2.5.4
2.4.5
2.2.14
2.2.7
2.4.4
2.2.13
2.2.6
2.6.1
2.5.2
2.2.12
2.2.5
2.6.0
2.2.11
2.0.6
2.4.7
2.2.9
2.5.5
2.4.6
2.2.8
2.2.10
2.5.3
2.5.1
2.3.5
2.4.3
2.4.2
1.0.4
0.11.4
2.4
2.3.4
2.3.3
2.4.1
2.5.0
1.2.7
2.2.4
1.1.10
2.0.5
2.0.4
1.1.13
1.1.11
1.1.12
2.2
2.3
1.2.4
1.2.3
1.2.6
1.2.5
1.1.9
1.1.8
2.1.5
2.3.2
2.1.4
1.1.5
1.1.7
1.1.6
2.1
2.1.3
2.0.3
2.1.2
2.0.2
2.1.1
2.0.1
0.11.3
0.11.2
0.11.1
2.0
1.2.1
1.1.4
1.2
1.1.3
1.1.2
1.1.1
1.1
1.0.2
1.0.3
0.11
1.0
1.0.1
0.10
0.10.4
0.10.3
0.6.3
0.8.2
0.8.5.3
0.9
0.8.5.4
0.7
0.5.4.5
0.5.4.6
0.7.5
0.8.11
0.7.4
0.9.1
0.7.3
0.5.5
0.7.12
0.8.5
0.7.6
0.8.10
0.8.8
0.7.9
0.8.7
0.7.8
0.8.6
0.7.7
0.7.11
0.8.1
0.8.0
0.7.2
0.7.1
0.6.2
0.5.4
0.6.1
0.5.3
0.5.2
0.5.1
0.6
0.5
0.4.9
0.3
0.3.2
0.4.3
0.3.4
0.4.0
0.3.1
0.4.5
0.4.2
0.3.3
0.4.4
0.4.6
0.4.8
cvs
0.4.9 pre1
0.4.7
Vulnerabilities (342)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135067 - Out-of-bounds read CVE-2026-30997 |
CWE-125 | Medium | 8.0.2 | 23.06.2026 |
SB2026062341 SB2026062343 SB2026062344 |
||
| #VU118789 - Out-of-bounds write CVE-2025-59728 |
CWE-787 | Low | 8.0 | 26.11.2025 |
SB2025112653 SB2025112654 SB2025112655 and 2 more |
||
| #VU117665 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-6605 |
CWE-611 | Low | - | 27.10.2025 |
SB2025102710 SB2025102719 |
||
| #VU117664 - Heap-based Buffer Overflow CVE-2025-9951 |
CWE-122 | High | 8.0 | 27.10.2025 |
SB2025102709 SB2025102719 |
||
| #VU117663 - NULL Pointer Dereference CVE-2025-10256 |
CWE-476 | Low | - | 27.10.2025 |
SB2025102708 SB2025102719 SB2026072205 |
||
| #VU117662 - NULL Pointer Dereference CVE-2023-6603 |
CWE-476 | Low | - | 27.10.2025 |
SB2025102708 SB2025102719 SB2025112728 |
||
| #VU117354 - Missing release of memory after effective lifetime CVE-2018-1000036 |
CWE-401 | Medium | - | 17.10.2025 |
SB2018052438 SB2025101754 |
||
| #VU117351 - Out-of-bounds read CVE-2024-35367 |
CWE-125 | Medium | 7.0 | 17.10.2025 |
SB2025101752 SB2025101753 SB2025101760 and 1 more |
||
| #VU117350 - Integer overflow CVE-2024-35366 |
CWE-190 | High | 7.0 | 17.10.2025 |
SB2025101752 SB2025101753 SB2024120682 |
||
| #VU115966 - NULL Pointer Dereference CVE-2025-7700 |
CWE-476 | Medium | - | 19.09.2025 |
SB20250919148 SB20250919153 SB20250919154 and 9 more |
||
| #VU114804 - Memory corruption CVE-2025-1594 |
CWE-119 | High | 7.1.1 | 04.09.2025 |
SB2025090460 SB2025090471 SB2025092101 |
||
| #VU110619 - NULL Pointer Dereference CVE-2009-0385 |
CWE-476 | High | 0.6.3 | 20.11.2020 |
SB2020112022 |
||
| #VU110597 - Memory corruption CVE-2014-8548 |
CWE-119 | Medium | 0.4.9 pre1, 0.5.6, 0.6.4, 0.7.13, 0.8.12, 0.9.2, 0.10.5, 0.11.5, 1.0.5, 1.1.14, 1.2.8, 2.0.6, 2.1.6, 2.2.5, 2.3.5, 2.4.1 | 03.12.2016 |
SB2016120312 SB2016031227 SB2015031702 |
||
| #VU110598 - Memory corruption CVE-2014-8547 |
CWE-119 | Medium | 0.4.9 pre1, 0.5.6, 0.6.4, 0.7.13, 0.8.12, 0.9.2, 0.10.5, 0.11.5, 1.0.5, 1.1.14, 1.2.8, 2.0.6, 2.1.6, 2.2.5, 2.3.5, 2.4.1 | 03.12.2016 |
SB2016120312 SB2016031227 SB2015031702 |
||
| #VU110599 - Improper input validation CVE-2014-8544 |
CWE-20 | Medium | 0.4.9 pre1, 0.5.6, 0.6.4, 0.7.13, 0.8.12, 0.9.2, 0.10.5, 0.11.5, 1.0.5, 1.1.14, 1.2.8, 2.0.6, 2.1.6, 2.2.5, 2.3.5, 2.4.1 | 03.12.2016 |
SB2016120312 SB2016031227 SB2015031702 |
||
| #VU110604 - Improper input validation CVE-2013-3674 |
CWE-20 | Medium | 1.2.1 | 28.10.2015 |
SB2013100406 SB2015020705 |
||
| #VU110606 - Improper input validation CVE-2013-3672 |
CWE-20 | Medium | 1.2.1 | 28.10.2015 |
SB2013100406 SB2015020705 |
||
| #VU110603 - Improper input validation CVE-2013-3675 |
CWE-20 | Medium | 1.2.1 | 04.10.2013 |
SB2013100406 |
||
| #VU110605 - Memory corruption CVE-2013-3673 |
CWE-119 | Medium | 1.2.1 | 10.06.2013 |
SB2013100406 |
||
| #VU110608 - Improper input validation CVE-2013-3671 |
CWE-20 | Medium | 1.2.1 | 10.06.2013 |
SB2013100406 |
Showing elements 1 - 20 out of 342