FFmpeg
Number 92 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: FFMPEG, FFmpeg, ffmpeg
Total vulnerabilities
204
Critical
5
High
76
Known Exploited
0
Exploit available
3
Network, no login needed
14.7%
Of 204 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 171 | 1 | 57 | 81 | 32 | 0 |
| 2025 | 9 | 0 | 5 | 4 | 0 | 0 |
| 2024 | 23 | 3 | 14 | 5 | 1 | 0 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2022 | 1 | 1 | 0 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| FFmpeg | 179 | 62 |
| ffmpeg | 23 | 17 |
| FFMPEG | 1 | 1 |
| MPEG-DASH | 1 | 1 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 103 | 72 |
| Use of Uninitialized Resource | 29 | 0 |
| Unchecked Return Value | 11 | 0 |
| Missing Release of Memory after Effective Lifetime | 10 | 0 |
| Loop with Unreachable Exit Condition ('Infinite Loop') | 5 | 1 |
| Reachable Assertion | 5 | 0 |
| Allocation of Resources Without Limits or Throttling | 4 | 0 |
| Divide By Zero | 4 | 0 |
| Memory Allocation with Excessive Size Value | 4 | 0 |
| Incorrect Calculation of Buffer Size | 3 | 3 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-125270 | FFmpeg through 9.0.2 Heap Out-of-Bounds Read in V4L2 M2M Encoder | Medium | 0.1% | |
| CVE-2026-125269 | FFmpeg through 9.0.2 Double Free via cbs_sei_delete_message in cbs_sei.c | High | 0.1% | |
| CVE-2026-125268 | FFmpeg through 9.0.2 Uninitialized Heap Memory Disclosure in CFHD Decoder | Low | 0.1% | |
| CVE-2026-125267 | FFmpeg before 8.1.3 and 9.x before 9.0.2 Heap Out-of-Bounds Write via APAC Decoder | High | 0.1% | |
| CVE-2026-125266 | FFmpeg through 9.0.2 Uninitialized Stack Memory Disclosure via SANM Codec 23 | Low | 0.1% | |
| CVE-2026-125265 | FFmpeg through 9.0.2 Use-After-Free via NVDEC Stale Bitstream Pointer | Medium | 0.1% | |
| CVE-2026-125264 | FFmpeg through 9.0.2 CPU Exhaustion via JPEG XL Parser TOC Count | Medium | 0.2% | |
| CVE-2026-125263 | FFmpeg 9.0 through 9.0.2 Memory Exhaustion via LCEVC Enhancement Dimensions | Medium | 0.2% | |
| CVE-2026-125262 | FFmpeg through 9.0.2 Heap Buffer Overflow via LCEVC Enhancement Decoding | High | 0.1% | |
| CVE-2026-125261 | FFmpeg through 9.0.2 SGI Encoder Out-of-Bounds Read via sgienc.c | Medium | 0.1% |