« List of all vendors

FFmpeg

List of Opam related CVEs (36 found)

CVE-2026-107698 – FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-107697 – FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-107696 – FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
High severity
CVE-2026-107695 – FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
High severity
CVE-2026-107678 – FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-107677 – FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-107676 – FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-107675 – FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-107660 – FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts
10/8/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-96611
9/23/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-52297
9/13/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Low severity
CVE-2026-52296
9/13/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Low severity
CVE-2026-52295
9/1/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Low severity
CVE-2026-70632 – FFmpeg 4.4 < 9.0 Heap Out-of-Bounds Write in CFHD Decoder via AVI Demuxing
8/6/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
High severity
CVE-2026-70631 – FFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder
8/6/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-70630 – FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder
8/6/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-70629 – FFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder
8/6/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
Medium severity
CVE-2026-70628 – FFmpeg 0.5 < 9.0 DVB Subtitle Parser Heap Buffer Overflow via WTV File
8/6/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
High severity
CVE-2026-66041 – FFmpeg 7.0 - 8.1.2 Heap Out-of-Bounds Write via vf_quirc Filter
7/24/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
High severity
CVE-2026-66040 – FFmpeg Heap Out-of-Bounds Write via PNG/APNG eXIf Encoder
7/24/2026
Affected packages: conf-ffmpeg • ffmpeg • opus
High severity