Skip to content

Ffmpeg · product

Ffmpeg

632 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
4

Every one of the 632 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.CVE-2009-4637Ffmpeg · 17% likely

    CWE-119

  2. FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names…CVE-2017-9993Ffmpeg · 16% likely

    CWE-200

  3. FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an e…CVE-2016-1897Ffmpeg · 15% likely

    CWE-200

  4. FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an…CVE-2016-1898Ffmpeg · 13% likely

    CWE-200

  5. Stack-based buffer overflow in the str_read_packet function in libavformat/psxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash…CVE-2008-3162Ffmpeg · 9.3% likely

    CWE-119

  6. Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbit…CVE-2016-10190Ffmpeg · 8.4% likely

    CWE-119

  7. FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c a…CVE-2009-4635Ffmpeg · 8.1% likely

    CWE-94

  8. vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execut…CVE-2009-4633Ffmpeg · 7.9% likely

    CWE-189

  9. Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbi…CVE-2016-10191Ffmpeg · 7.5% likely

    CWE-119

  10. Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation…CVE-2009-4634Ffmpeg · 7.2% likely

    CWE-189

  11. Integer signedness error in the fourxm_read_header function in libavformat/4xm.c in FFmpeg before revision 16846 allows remote attackers to execute arbitrary code via a malformed…CVE-2009-0385Ffmpeg · 6.7% likely
  12. Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code…CVE-2016-10192Ffmpeg · 6.6% likely

    CWE-119

  13. The Matroska format decoder in FFmpeg before 0.8.3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file.CVE-2011-3504Ffmpeg · 5.9% likely

    CWE-94

  14. The ff_h264_decode_sei function in libavcodec/h264_sei.c in FFmpeg before 0.10 allows remote attackers to have an unspecified impact via crafted Supplemental enhancement informati…CVE-2011-3946Ffmpeg · 5.7% likely

    CWE-399

  15. Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspec…CVE-2006-4800Ffmpeg · 5.3% likely
  16. Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib,…CVE-2005-4048Ffmpeg · 5.2% likely

    CWE-119

  17. Off-by-one error in the VP3 decoder (vp3.c) in FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted VP3 file that trig…CVE-2009-4631Ffmpeg · 5.1% likely

    CWE-189

  18. ffmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-boundsCVE-2022-3964Ffmpeg · CVSS 4.3 · 4.7% likely

    CWE-125

  19. Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and…CVE-2014-5271Ffmpeg · 4.7% likely

    CWE-119

  20. Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9 before r14715, as used by MPlayer, allow context-dependent attackers to have an unknown impact via vectors related…CVE-2008-4866Ffmpeg · 4.7% likely

    CWE-119

  21. Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x before 0.8.8; and in Libav 0.5.x before 0.5.…CVE-2011-4364Ffmpeg · 4.6% likely

    CWE-119

  22. The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file.CVE-2017-9608Ffmpeg · 4.6% likely

    CWE-476

  23. The avpriv_dv_produce_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5,…CVE-2011-3929Ffmpeg · 4.6% likely

    CWE-119

  24. Integer overflow in the get_len function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x be…CVE-2014-4610Ffmpeg · 4.5% likely

    CWE-190

  25. FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC…CVE-2011-0723Ffmpeg · 4.4% likely

    CWE-399

  26. The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8…CVE-2012-0858Ffmpeg · 4.3% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.