Aggregates CVE and security vulnerability intelligence across all FFmpeg-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk buffer overflow and vendor risk memory corruption and related problems; some flaws may lead to vendor impact unexpected behavior, affecting vendor surface software deployment scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2014-125013 | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125012 | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is an unknown function of the file libavcodec/dxtroy.c. The manipulation leads to integer coercion error. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.66% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125011 | A vulnerability was found in FFmpeg 2.0. It has been declared as problematic. Affected by this vulnerability is the function decode_frame of the file libavcodec/ansi.c. The manipulation leads to integer coercion error. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.55% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125010 | A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decode_slice_header of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.57% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125009 | A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125008 | A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125007 | A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125006 | A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125005 | A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125004 | A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125003 | A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2014-125002 | A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function dnxhd_init_rc of the file libavcodec/dnxhdenc.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. | [email protected] | 5.3 | 0.63% | 2022-06-18 | 2026-06-16 |
| CVE-2022-1475 | An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file. | [email protected] | 5.5 | 0.88% | 2022-05-02 | 2026-06-17 |
| CVE-2020-23906 | FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity. | [email protected] | 5.5 | 0.36% | 2021-11-10 | 2026-06-16 |
| CVE-2021-38094 | Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. | [email protected] | 8.8 | 1.20% | 2021-09-20 | 2026-06-17 |
| CVE-2021-38093 | Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. | [email protected] | 8.8 | 1.21% | 2021-09-20 | 2026-06-17 |
| CVE-2021-38092 | Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. | [email protected] | 8.8 | 1.22% | 2021-09-20 | 2026-06-17 |
| CVE-2021-38091 | Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. | [email protected] | 8.8 | 1.18% | 2021-09-20 | 2026-06-17 |
| CVE-2021-38090 | Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts. | [email protected] | 8.8 | 1.18% | 2021-09-20 | 2026-06-17 |
| CVE-2020-20902 | A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could result in disclosure of information. | [email protected] | 6.5 | 1.13% | 2021-09-20 | 2026-06-16 |