Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-125206 |
low | 2.0 | 0.0012 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder | |
CVE-2026-125205 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1_fram | |
CVE-2026-125204 |
high | 7.3 | 0.0014 | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow in ff_libwebp_get_frame() in libwebpe | |
CVE-2026-125203 |
high | 8.5 | 0.0014 | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in | |
CVE-2026-125202 |
high | 7.3 | 0.0014 | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_fra | |
CVE-2026-125201 |
high | 7.3 | 0.0013 | 2026-11-09 | FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerabi | |
CVE-2026-125200 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because | |
CVE-2026-125199 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavco | |
CVE-2026-125198 |
low | 2.0 | 0.0012 | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() i | |
CVE-2026-125197 |
medium | 6.9 | 0.0014 | 2026-11-09 | FFmpeg through 9.0.2 contains an integer underflow in decode_frame() in libavcodec/lcldec. | |
CVE-2026-125196 |
high | 7.3 | 0.0014 | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in liboapve_encode() in | |
CVE-2026-125195 |
low | 2.0 | 0.0012 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in adpcm_en | |
CVE-2026-125194 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcm_dvd_encode_frame( | |
CVE-2026-125193 |
medium | 6.9 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy | |
CVE-2026-125192 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in | |
CVE-2026-125191 |
medium | 5.7 | 0.0015 | 2026-11-09 | FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2_buffers.c that all | |
CVE-2026-125190 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in decode_mvc2() in | |
CVE-2026-125189 |
medium | 5.7 | 0.0015 | 2026-11-09 | FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevc_metadata | |
CVE-2026-125188 |
low | 2.0 | 0.0012 | 2026-11-09 | FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in libavcodec/prores | |
CVE-2026-125187 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's tta | |
CVE-2026-125186 |
medium | 5.7 | 0.0015 | 2026-11-09 | FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in the dt | |
CVE-2026-125185 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a division by zero vulnerability in ff_aom_parse_film_grain_ | |
CVE-2026-125184 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg 6.1 through 9.0.2 contains an information disclosure vulnerability in the CamStudio | |
CVE-2026-125183 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a denial of service vulnerability in pps_3d_extension() in l | |
CVE-2026-125182 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Cook decoder join | |
CVE-2026-125181 |
high | 7.3 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in flic_decode_frame_15 | |
CVE-2026-125180 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg 8.1 through 9.0.2 contains a memory exhaustion vulnerability in the libavcodec/exif | |
CVE-2026-125179 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the VQA video decod | |
CVE-2026-125178 |
medium | 6.9 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdsc_load_cursor | |
CVE-2026-125177 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC dec | |
CVE-2026-125176 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decode_hybrid( | |
CVE-2026-125175 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsv_decode_bl | |
CVE-2026-125174 |
medium | 6.8 | 0.0018 | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a NULL pointer dereference vulnerability | |
CVE-2026-125173 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in libxevd_receive_frame() in li | |
CVE-2026-125172 |
medium | 6.9 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in libxevd_receive_frame | |
CVE-2026-125171 |
medium | 6.9 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Musepack SV7 deco | |
CVE-2026-125170 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targa_de | |
CVE-2026-125104 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains a memory exhaustion vulnerability in ape_decode_frame() in l | |
CVE-2026-125103 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in ff_mlz_decompress | |
CVE-2026-125102 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in tak_deco | |
CVE-2026-125101 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in the VMnc decoder | |
CVE-2026-125100 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's d | |
CVE-2026-125099 |
medium | 4.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the GEM | |
CVE-2026-125098 |
medium | 4.8 | 0.0011 | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_ | |
CVE-2026-125097 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in raw_deco | |
CVE-2026-125096 |
medium | 4.8 | 0.0013 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in libavcod | |
CVE-2026-125095 |
medium | 4.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video d | |
CVE-2026-125073 |
medium | 6.8 | 0.0016 | 2026-11-09 | FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavc | |
CVE-2026-125072 |
medium | 5.7 | 0.0017 | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp_decode_frame( | |
CVE-2026-125071 |
medium | 5.7 | 0.0017 | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/jvdec |