FFmpeg CVEs

15 high and critical vulnerabilities covered by CVE Brief since 2026-06-19, each with independent analyst commentary.

← All vendors RSS feed Watch this vendor
15 Total CVEs
15 AI Analyzed
0 CISA KEV
0 Critical

Profile

0% ended up actively exploited 0 of 15 added to CISA KEV
0% rated critical (CVSS 9.0+) 0 critical, 15 high
0 with a public exploit on record positive-only index; absence is not proof

Last 12 months

15 CVEs in the last 12 months

Products

  • FFmpeg15

1 products in total

Every figure counts the high and critical CVEs CVE Brief has published for this vendor, not every CVE the vendor has ever received. Exploitation means listing in the CISA Known Exploited Vulnerabilities catalog. No patch-availability figure is shown because CVE Brief does not measure it.

All Vendors
Showing 1-15 of 15 CVEs
CVE-2026-8461
Analyzed
8.8
FFmpeg FFmpeg

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases...

2026-06-19
Full analysis →
CVE-2026-30754
Analyzed
8.8
FFmpeg FFmpeg

A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nal_send function in libavformat/rtpenc_h264_hevc.c, a...

2026-09-12
Full analysis →