CVE Tools
Track your stack

Ffmpeg

669 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Ffmpeg, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Ffmpeg CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Ffmpeg CVEs per month
MonthCVEs
2024-122
2025-016
2025-029
2025-031
2025-040
2025-051
2025-060
2025-070
2025-081
2025-091
2025-107
2025-111
2025-121
2026-010
2026-022
2026-031
2026-044
2026-050
2026-062
2026-0716
2026-0812
2026-095
2026-1010
2026-11126

Severity

How the 669 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical10716%
  • High20631%
  • Medium31948%
  • Low376%

Latest CVEs

The 15 most recently published vulnerabilities affecting Ffmpeg.

  1. CVE-2026-125270FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M Encoder5.3
  2. CVE-2026-125269FFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.c7.0
  3. CVE-2026-125267FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC Decoder7.8
  4. CVE-2026-125268FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD Decoder3.3
  5. CVE-2026-125266FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via SANM Codec 233.3
  6. CVE-2026-125264FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC Count5.5
  7. CVE-2026-125265FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer5.3
  8. CVE-2026-125263FFmpeg 9.0 through 9.0.2 Memory Exhaustion via LCEVC Enhancement Dimensions4.7
  9. CVE-2026-125262FFmpeg through 9.0.2 Heap Buffer Overflow via LCEVC Enhancement Decoding7.8
  10. CVE-2026-125261FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c6.1
  11. CVE-2026-125260FFmpeg through 9.0.2 Heap Buffer Overflow in EXR Encoder RLE Path7.0
  12. CVE-2026-125259FFmpeg through 9.0.2 Heap Buffer Overflow via ProRes prores_ks Encoder7.8
  13. CVE-2026-125258FFmpeg through 9.0.2 Division by Zero via dovi_configure_ext() in dovi_rpuenc.c4.7
  14. CVE-2026-125257FFmpeg through 9.0.2 Heap Overflow via Nellymoser Encoder Trellis Search7.0
  15. CVE-2026-125256FFmpeg through 9.0.2 Heap Buffer Overflow via RISC-V Vector diff_bytes Routine7.0

Product grouping is registry-driven, with AI assist and human review. How it works