FFMPEG vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20259
3. 202650

Newest CVEs

• CVE-2026-120247

  FFmpeg 2.3 through 9.0.2 Huffyuv Decoder Uninitialized Heap Memory Disclosure

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-120246

  FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-120245

  FFmpeg 0.10 through 9.0.2 Uninitialized Memory Disclosure via Sun Raster Decoder

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-120244

  FFmpeg 2.1 through 9.0.2 Uninitialized Memory Leak via PCX Decoder

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-120243

  FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-120210

  FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path

  FFmpeg · FFmpeg

  Medium5.3
• CVE-2026-107698

  FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling

  FFmpeg · FFmpeg

  Medium5.3
• CVE-2026-107697

  FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()

  FFmpeg · FFmpeg

  Medium5.3
• CVE-2026-107696

  FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c

  FFmpeg · FFmpeg

  High7.1
• CVE-2026-107695

  FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist

  FFmpeg · FFmpeg

  High7.1