FFmpeg

Latest vulnerabilities

• CVE-2026-96611 CVSS 6.9 medium FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF…
• CVE-2026-90816 CVSS 5.3 medium A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c of the component…
• CVE-2026-90815 CVSS 2.1 low A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function setup_3x3 of the file…
• CVE-2026-52297 CVSS 2.9 low FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in…
• CVE-2026-52296 CVSS 2.9 low FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.
• CVE-2026-52295 CVSS 2.9 low FFmpeg before 9.0 has an out-of-bounds read because the copied extradata lacked required padding before GetBitContext-based access in…