Known vulnerabilities in FFmpeg - page 17

Software: FFmpeg
Software CPE: cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 342
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FFmpeg FFmpeg is affected by 342 known vulnerabilities: 148 high, 148 medium, 46 low Critical High Medium Low

Vulnerabilities (342)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32787 - Heap-based Buffer Overflow
CVE-2012-0947
CWE-122 Medium
No
No
0.5.9, 0.6.6, 0.7.6, 0.8.2 20.08.2012 SB2012082004
SB2012070206
SB2012102001
#VU32798 - Improper input validation
CVE-2012-0853
CWE-20 Medium
No
No
0.7.12 20.08.2012 SB2012082005
SB2012052304
SB2012102001
#VU43706 - Improper input validation
CVE-2012-0859
CWE-20 Medium
No
No
- 20.08.2012 SB2012082009
#VU44101 - Improper input validation
CVE-2011-4031
CWE-20 High
No
No
- 09.05.2012 SB2012050902
#VU110609 - Improper input validation
CVE-2009-4640
CWE-20 Medium
No
No
- 26.10.2011 SB2011102603
#VU110610 - Divide By Zero
CVE-2009-4639
CWE-369 Medium
No
No
- 26.10.2011 SB2011102604
#VU110613 - Improper Control of Generation of Code ('Code Injection')
CVE-2009-4636
CWE-94 Medium
No
No
- 26.10.2011 SB2011102605
#VU110614 - Stack-based buffer overflow
CVE-2009-4635
CWE-121 High
No
No
- 26.10.2011 SB2011102606
#VU110615 - Improper input validation
CVE-2009-4634
CWE-20 High
No
No
- 26.10.2011 SB2011102607
#VU110616 - Improper input validation
CVE-2009-4633
CWE-20 High
No
No
- 26.10.2011 SB2011102608
#VU110617 - Improper input validation
CVE-2009-4632
CWE-20 Medium
No
No
- 26.10.2011 SB2011102609
#VU32840 - Resource Management Errors
cve-2011-3973
CWE-399 Medium
No
No
0.7.4 02.10.2011 SB2011100201
SB2011112103
#VU44656 - Improper input validation
CVE-2011-3974
CWE-20 Medium
No
No
- 02.10.2011 SB2011100204
#VU33959 - Improper input validation
CVE-2011-3362
CWE-20 Medium
No
No
0.7.3 02.10.2011 SB2011100202
SB2011112102
#VU32843 - Improper Control of Generation of Code ('Code Injection')
cve-2011-3504
CWE-94 High
No
No
0.8.3 29.09.2011 SB2011092901
SB2011112107
#VU45034 - Resource Management Errors
CVE-2011-2161
CWE-399 Medium
No
No
0.5.4 21.05.2011 SB2011052101
#VU45419 - Improper input validation
CVE-2010-4704
CWE-20 Medium
No
No
- 23.01.2011 SB2011012301
#VU45420 - Improper input validation
CVE-2010-4705
CWE-20 High
No
No
- 23.01.2011 SB2011012301
#VU110612 - Stack-based buffer overflow
CVE-2009-4637
CWE-121 High
Available
No
- 20.05.2010 SB2010052001
#VU110611 - Improper input validation
CVE-2009-4638
CWE-20 Medium
No
No
- 04.05.2010 SB2010050401


Showing elements 321 - 340 out of 342