CVE security advisories and vulnerability history for FFmpeg.
FFmpeg has 526 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 28 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting FFmpeg products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
A quick read on FFmpeg's vulnerability posture, as a share of its 526 published CVEs.
across 526 scored CVEs
286 of 526 scored
0 of 526 CVEs
28 of 526 CVEs
449 of 526 CVEs
How the CVSS severity of FFmpeg's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of FFmpeg's CVEs are currently listed in CISA's KEV catalog.
Public exploits
28
28 of FFmpeg's CVEs have a known public exploit available.
The FFmpeg products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in FFmpeg CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish FFmpeg CVE records.
How many FFmpeg CVEs were published each year.
The most recently disclosed vulnerabilities affecting FFmpeg.
Track new FFmpeg CVEs as they are disclosed and get AI-written analysis and remediation guidance.
Monitor FFmpeg CVEsBrowse vulnerabilities for other tracked vendors.
Common questions about FFmpeg vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new FFmpeg vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
