Known vulnerabilities in FFmpeg - page 8

Software: FFmpeg
Software CPE: cpe:2.3:a:ffmpeg_sourceforge_net:ffmpeg:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 342
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FFmpeg FFmpeg is affected by 342 known vulnerabilities: 148 high, 148 medium, 46 low Critical High Medium Low

Vulnerabilities (342)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117354 - Missing release of memory after effective lifetime
CVE-2018-1000036
CWE-401 Medium
No
No
- 17.10.2025 SB2018052438
SB2025101754
#VU110574 - Improper input validation
CVE-2015-8364
CWE-20 Medium
No
No
2.6.5, 2.7.3, 2.8.3 21.12.2018 SB2017110403
#VU14019 - Out-of-bounds read
CVE-2018-13302
CWE-125 Low
No
No
4.0.2 26.07.2018 SB2018072617
SB2018071808
SB2018042116
#VU14018 - Out-of-bounds read
CVE-2018-13300
CWE-125 Low
No
No
4.0.2 26.07.2018 SB2018072617
SB2018071808
SB2019032813
and 4 more
#VU31265 - Out-of-bounds read
CVE-2018-1999010
CWE-125 High
No
No
3.4.3 23.07.2018 SB2018072317
SB2019081681
#VU13984 - Divide By Zero
CVE-2018-14394
CWE-369 Low
No
No
4.0.2 23.07.2018 SB2018072311
SB2018042119
#VU13983 - Divide By Zero
CVE-2018-14395
CWE-369 Low
No
No
4.0.2 23.07.2018 SB2018072311
SB2018073102
SB2018042120
#VU12184 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-7751
CWE-835 Low
No
No
- 26.04.2018 SB2018033010
SB2018042122
SB2020033017
#VU11781 - Out-of-bounds read
CVE-2018-9841
CWE-125 Low
No
No
- 12.04.2018 SB2018033010
SB2019081687
SB2020033017
#VU11307 - Out-of-bounds read
CVE-2018-7557
CWE-125 Low
No
No
- 28.03.2018 SB2018022612
SB2018072617
SB2018082828
and 1 more
#VU10456 - Out-of-bounds read
CVE-2018-6912
CWE-125 Low
No
No
- 12.02.2018 SB2018021208
SB2018042121
SB2020033017
#VU31351 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-5359
CWE-94 High
No
No
0.11 09.02.2018 SB2018020925
#VU31352 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-5360
CWE-94 High
No
No
0.11 09.02.2018 SB2018020925
#VU31367 - Integer underflow
CVE-2015-1208
CWE-191 Low
No
No
2.4.6 09.01.2018 SB2018010926
#VU37710 - NULL Pointer Dereference
CVE-2017-1000460
CWE-476 Medium
No
No
- 03.01.2018 SB2018010312
#VU31375 - NULL Pointer Dereference
CVE-2017-9608
CWE-476 Medium
No
No
3.3.3 27.12.2017 SB2017122702
SB2017120767
#VU9431 - Out-of-bounds read
CVE-2017-16840
CWE-125 Low
No
No
- 28.11.2017 SB2017110906
#VU9430 - Out-of-bounds read
CVE-2017-15672
CWE-125 Low
No
No
- 28.11.2017 SB2017110906
#VU9429 - Double Free
CVE-2017-15186
CWE-415 Low
No
No
- 28.11.2017 SB2017110906
SB2017120761
#VU110573 - Memory corruption
CVE-2015-8365
CWE-119 Medium
No
No
2.6.5, 2.7.3, 2.8.3 04.11.2017 SB2017110403


Showing elements 141 - 160 out of 342