Skip to content
Threat Feed

Product

Ffmpeg

5 briefs RSS
high advisory

Heap Buffer Overflow in FFmpeg DVB Subtitle Parser

FFmpeg versions 0.5 through 8.9 are vulnerable to a signed integer overflow in the DVB subtitle parser that can be triggered via a crafted WTV file to achieve remote code execution.

FFmpeg +2 vulnerability memory-corruption
1t 2c updated
high threat

FFmpeg: Multiple Vulnerabilities

Multiple vulnerabilities in ffmpeg allow a remote, anonymous attacker to cause memory corruption, execute arbitrary code, trigger a denial-of-service condition, or disclose confidential information. The attacker does not require authentication to exploit these flaws.

exploited ffmpeg vulnerability rce denial-of-service information-disclosure memory-corruption
2t
high advisory

CVE-2026-66040: FFmpeg Heap Out-of-Bounds Write in PNG/APNG Encoders

A heap out-of-bounds write vulnerability, CVE-2026-66040, exists in the native PNG and APNG encoders of FFmpeg through version 8.1.2, allowing remote attackers to corrupt heap memory and achieve potential arbitrary code execution by supplying a crafted PNG image with a malicious eXIf chunk.

FFmpeg cve vulnerability heap-overflow rce
1t 1c
medium advisory

FFmpeg: Multiple Vulnerabilities Allow Code Execution and DoS

Multiple vulnerabilities in FFmpeg allow an attacker to achieve arbitrary code execution or cause a denial-of-service condition.

ffmpeg vulnerability code-execution dos execution impact
2t
medium advisory

ffmpeg Vulnerability Allows Code Execution and Potential Denial of Service

A vulnerability in ffmpeg allows an attacker to execute arbitrary program code and potentially conduct a denial of service attack.

ffmpeg code-execution denial-of-service
2r 1t