FFMPEG FFmpeg

Name: FFMPEG FFmpeg
Brand: FFMPEG

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical5high3medium0low

updated 2026-10-28

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-8461US	—	1.57% (75th)	Exploit	8.1.2	2026-06-18	0 → 8.1.2
CVE-2025-9951US	—	0.44% (38th)	Exploit	no fix	2025-09-09	≤ < 8.0
CVE-2026-64831US	—	0.85% (58th)	—	no fix	2026-07-22	2 versions
CVE-2022-2566US	high7.8	0.81% (57th)	—	unspecified	2022-09-23	3 versions
CVE-2026-66040US	high8.8	0.78% (56th)	—	b506fafec9a19fcbc2be5271875fd4a63d6615bc	2026-07-24	2 versions
CVE-2026-64834US	—	0.73% (54th)	—	no fix	2026-07-22	2 versions
CVE-2026-64830US	—	0.65% (51st)	—	no fix	2026-07-22	2 versions
CVE-2026-64835US	—	0.50% (42nd)	—	no fix	2026-07-22	2 versions
CVE-2026-58049US	—	0.50% (42nd)	—	no fix	2026-06-28	≤ 0 ≤bcd2c69e087a09b07cf45c6bd2428ee1ccb2925c
CVE-2026-66041US	high7.8	0.49% (42nd)	—	4da9812e25894fb51d62a8875cfa8eb39b5e20f5	2026-07-24	2 versions
CVE-2026-66036US	high8.8	0.40% (34th)	—	5d7112c60e6f0f0742ce47d448e6da0718a70f4c	2026-07-24	2 versions
CVE-2026-64833US	—	0.40% (34th)	—	no fix	2026-07-22	2 versions
CVE-2025-0518US	medium5.3	0.38% (32nd)	—	no fix	2025-01-16	≤ 7.1
CVE-2026-66037US	medium5.5	0.35% (28th)	—	86708357d126af84c16f80d9c57335d1e8c845c5	2026-07-24	2 versions
CVE-2026-64832US	—	0.34% (27th)	—	no fix	2026-07-22	2 versions
CVE-2026-66039US	high7.8	0.31% (23rd)	—	aafb5c655edc76a753275c383ebb139feb032718	2026-07-24	2 versions
CVE-2026-65703US	—	0.29% (22nd)	—	fd3ee52fab34d98a95b787d0b5ff45685766200c	2026-07-23	2 versions
CVE-2026-66038US	medium6.5	0.24% (15th)	—	86708357d126af84c16f80d9c57335d1e8c845c5	2026-07-24	2 versions
CVE-2026-70632US	—	0.20% (10th)	—	9.0	2026-08-06	4.4 → 9.0
CVE-2025-59732US	—	0.19% (9th)	—	8.0	2025-10-06	2 versions
CVE-2026-65706US	—	0.19% (8th)	—	a7e38b617b32f996beaa371bbf04b39907d7a527	2026-07-23	2 versions
CVE-2026-65705US	—	0.19% (8th)	—	f186c50cf53aec20e9a29059cb22ca3f2d59201c	2026-07-23	2 versions
CVE-2025-59733US	—	0.18% (8th)	—	8.0	2025-10-06	2 versions
CVE-2025-59734US	—	0.18% (7th)	—	8.0	2025-10-06	2 versions
CVE-2026-70631US	—	0.18% (7th)	—	9.0	2026-08-06	0.5 → 9.0
CVE-2026-65704US	—	0.18% (7th)	—	de771bd52774a52d45b0e2c82e56995a1ef40df7	2026-07-23	2 versions
CVE-2026-70630US	—	0.18% (7th)	—	9.0	2026-08-06	3.0 → 9.0
CVE-2026-70629US	—	0.18% (7th)	—	9.0	2026-08-06	3.0 → 9.0
CVE-2025-59731US	—	0.18% (7th)	—	8.0	2025-10-06	2 versions
CVE-2025-59730US	—	0.16% (6th)	—	8.0	2025-10-06	829680f96a7a7ff02d1543895ec0fb713309d5c0 → 8.0
CVE-2025-59729US	—	0.16% (6th)	—	8.0	2025-10-06	a218cafe4d3be005ab0c61130f90db4d21afb5db → 8.0
CVE-2026-70628US	—	0.14% (4th)	—	9.0	2026-08-06	0.5 → 9.0
CVE-2026-40962US	critical9.8	0.13% (3rd)	—	8.1	2026-04-16	4.1 → 8.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write15 CVEs
CWE-122Heap-based Buffer Overflow6 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-908Use of Uninitialized Resource4 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-131Incorrect Calculation of Buffer Size2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan