- How many CVEs does FFmpeg have?
- FFmpeg has 542 published CVE records since 2005, including 80 in the last two years.
- How many FFmpeg CVEs are in CISA KEV?
- None of FFmpeg's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which FFmpeg products have the most CVEs?
- The FFmpeg products with the most published CVEs are FFmpeg, libavcodec, EXR decoder, FFmpeg 8.0, FFmpeg 8.0.1.
- What are the most common weakness types in FFmpeg CVEs?
- FFmpeg's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-20 (Improper Input Validation), CWE-125 (Out-of-bounds Read).
- Are there public exploits for FFmpeg vulnerabilities?
- Yes — 145 of FFmpeg's CVEs have a known public exploit.
- How many critical FFmpeg vulnerabilities are there?
- FFmpeg has 107 critical and 185 high-severity CVEs.
- What is the average severity of FFmpeg CVEs?
- The average CVSS base score across FFmpeg's scored CVEs is 7.4.