ffmpeg

9 records · 9 with a public proof-of-concept

Disclosed vulnerabilities where the NVD names ffmpeg as an affected vendor, highest CVSS first.

  1. MEDIUM 6.5CVE-2026-107696public PoC2026-10-08

    FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or a…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 6.5CVE-2026-107695public PoC2026-10-08

    FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a craf…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 5.9CVE-2026-107675public PoC2026-10-08

    FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords …

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 5.4CVE-2026-107698public PoC2026-10-08

    FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to intern…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 4.8CVE-2026-107660public PoC2026-10-08

    FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 4.7CVE-2026-107678public PoC2026-10-08

    FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a crafte…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 4.7CVE-2026-107677public PoC2026-10-08

    FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so ge…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  8. MEDIUM 4.3CVE-2026-107697public PoC2026-10-08

    FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use d…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →

  9. LOW 3.3CVE-2026-107676public PoC2026-10-08

    FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/A…

    ffmpeg

    AI risk analysis on Exploit-DB.ai →