FFmpeg: FFmpeg: Integer overflow and out-of-bounds write via CENC subsample data

A flaw was found in FFmpeg. This vulnerability, stemming from an integer overflow and a subsequent out-of-bounds write during the processing of Common Encryption CENC subsample data, could allow a local attacker to potentially trigger information disclosure, data corruption, or a denial of servic...

FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream

A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC Four Character Code, which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent...

FFmpeg: Denial of Service via crafted RTP/ASF stream

A flaw was found in FFmpeg. A remote attacker can exploit an infinite loop vulnerability in the RTP/ASF demuxer by sending a specially crafted stream. This vulnerability occurs because the rtpasffixheader function does not properly validate the size of data chunks, preventing the processing loop...

FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files

A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...

ffmpeg: FFmpeg: Arbitrary code execution via heap buffer overflow in VobSub subtitle demuxer.

A flaw was found in FFmpeg, a widely used multimedia framework. This vulnerability, a heap buffer overflow in the VobSub subtitle demuxer, allows a remote attacker to corrupt memory. By providing a specially crafted subtitle file, an attacker can trigger unbounded writes, which could lead to...

ffmpeg: FFmpeg: Remote code execution via out-of-bounds write in MagicYUV decoder

A flaw was found in FFmpeg's libavcodec library. This out-of-bounds write vulnerability, specifically within the MagicYUV decoder, could allow a remote attacker to execute arbitrary code on the affected system. In other scenarios, it may lead to a denial-of-service, making the system unavailable...

CVE-2026-75142 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...

CVE-2026-75146 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...

CVE-2026-75147 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...

GHSA-5VJ8-JGQJ-77H6 vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...

GHSA-63QJ-83CJ-JP3M vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...

GHSA-564V-JR2Q-MGWF vulnerabilities

Vulnerabilities for packages: eco-python-ffmpeg-minimal, ffmpeg, torchaudio-ffmpeg-tarballs...

RHEL 9 : RHEL AI 3.0 RPM runtime CVE fix - ffmpeg (Moderate) (RHSA-2026:74089)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74089 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application...

cve-2025-9951-ffmpeg-jp2-poc

CVE-2025-9951 FFmpeg JPEG 2000 Exploitation Research This repository contains two deliberately separated exploitation milestones for the FFmpeg JPEG 2000 component-mapping vulnerability: 1. 01-gdb-assisted/ — the original deterministic GDB-launched PoC and its full research-journey writeup,...

The vulnerability of the MACE6 decoder for audio formats in the FFmpeg multimedia library allows a perpetrator to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of the MACE6 decoder for FFmpeg’s multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library allows a hacker to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library lies in the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the RTP/ASF demultiplexer in the FFmpeg multimedia library relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the VobSub subtitle multiplexer in the FFmpeg multimedia library allows a hacker to execute arbitrary code.

The vulnerability of the VobSub subtitle multiplexer in the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library allows a intruder to damage memory, cause system failures, or execute arbitrary code.

The vulnerability of the QR-code processing filter in the FFmpeg multimedia library’s vfquirc module relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to damage memory, cause service failures, or execute...

The vulnerability of the S/PDIF multiplexer in FFmpeg’s multimedia library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the S/PDIF multiplexer in the FFmpeg multi-media library relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose protected information or cause service failures...