LIVE · cybersecurity feed
Live wire
vendor

Ffmpeg

17 CVEs published in the last four months. Exploited flaws first.

Critical0
High16
Medium1
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-648318.8highffmpegFFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decod45d ago
CVE-2026-648328.8highffmpegFFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within 45d ago
CVE-2026-660418.8highffmpegFFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a heap out-of-bounds write vulnerability in the vf_qui43d ago
CVE-2026-660368.8highffmpegFFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d 43d ago
CVE-2026-660398.8highffmpegFFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio43d ago
CVE-2026-660408.8highffmpegFFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG43d ago
CVE-2026-648358.8highffmpegFFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder wi45d ago
CVE-2026-648308.8highffmpegFFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer tha45d ago
CVE-2026-706327.8highffmpegFFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-of-bounds heap write vulnerability in the na30d ago
CVE-2026-657037.8highffmpegFFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allo44d ago
CVE-2026-657047.8highffmpegFFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption 44d ago
CVE-2026-657057.8highffmpegFFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_floodfill video filter th44d ago
CVE-2026-657067.8highffmpegFFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter tha44d ago
CVE-2026-706287.8highffmpegFFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed integer overflow vulnerability in the DVB 30d ago
CVE-2026-648347.5highffmpegFFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavform45d ago
CVE-2026-648337.1highffmpegFFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows at45d ago
CVE-2025-696935.4mediumffmpegOut-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c).173d ago

Filter the full tracker by Ffmpeg