[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU-kVMFaQ7gg3PG-IuCdM4Fj07RjxPnSfqPlOy2O7_Ag":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":35,"kevVulnerabilities":92,"topProductsByCves":93,"seoMetadata":98,"meta":107},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":34},10552,"ffmpeg",4,463,0,493,"2025-05-02","f",[16,20,25,30],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},45327,492,462,{"id":21,"product_name":22,"version_count":11,"cve_count":23,"kev_count":11,"last_cve_update":24},45329,"libavcodec",2,"2011-07-07",{"id":26,"product_name":27,"version_count":11,"cve_count":28,"kev_count":11,"last_cve_update":29},45328,"lavf_demuxer",1,"2008-07-18",{"id":31,"product_name":32,"version_count":28,"cve_count":28,"kev_count":11,"last_cve_update":33},45330,"libswresample","2017-12-12","Ffmpeg is a technology vendor with 4 tracked products and 463 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[36,45,53,60,64,70,76,80,84,88],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":44},"CVE-2009-4637","FFmpeg 0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger a stack-based buffer overflow.","2010-02-10",10,"v2","Critical",false,0.17351,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":43,"epssScore":52},"CVE-2017-9993","FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data.","2017-06-28",7.5,"v3.0","High",0.16437,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":50,"severity":58,"isKev":43,"epssScore":59},"CVE-2016-1897","FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.","2016-01-15",5.5,"Medium",0.14621,{"cveId":61,"description":62,"publishedDate":56,"cvssScore":57,"cvssVersion":50,"severity":58,"isKev":43,"epssScore":63},"CVE-2016-1898","FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.",0.13023,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":69},"CVE-2008-3162","Stack-based buffer overflow in the str_read_packet function in libavformat\u002Fpsxstr.c in FFmpeg before r13993 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted STR file that interleaves audio and video sectors.","2008-07-14",9.3,0.09251,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":50,"severity":42,"isKev":43,"epssScore":75},"CVE-2016-10190","Heap-based buffer overflow in libavformat\u002Fhttp.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbitrary code via a negative chunk size in an HTTP response.","2017-02-09",9.8,0.08359,{"cveId":77,"description":78,"publishedDate":39,"cvssScore":68,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":79},"CVE-2009-4635","FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with improperly ordered tags that cause (1) mov.c and (2) utils.c to use inconsistent codec types and identifiers, leading to processing of a video-structure pointer by the mp3 decoder, and a stack-based buffer overflow.",0.08058,{"cveId":81,"description":82,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":83},"CVE-2009-4633","vorbis_dec.c in FFmpeg 0.5 uses an assignment operator when a comparison operator was intended, which might allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that modifies a loop counter and triggers a heap-based buffer overflow.",0.07883,{"cveId":85,"description":86,"publishedDate":73,"cvssScore":74,"cvssVersion":50,"severity":42,"isKev":43,"epssScore":87},"CVE-2016-10191","Heap-based buffer overflow in libavformat\u002Frtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches.",0.07457,{"cveId":89,"description":90,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":91},"CVE-2009-4634","Multiple integer underflows in FFmpeg 0.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted file that (1) bypasses a validation check in vorbis_dec.c and triggers a wraparound of the stack pointer, or (2) access a pointer from out-of-bounds memory in mov.c, related to an elst tag that appears before a tag that creates a stream.",0.07152,[],[94,95,96,97],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":11,"cve_count":23,"kev_count":11,"last_cve_update":24},{"id":26,"product_name":27,"version_count":11,"cve_count":28,"kev_count":11,"last_cve_update":29},{"id":31,"product_name":32,"version_count":28,"cve_count":28,"kev_count":11,"last_cve_update":33},{"title":99,"metaDescription":100,"keywords":101,"structuredData":102},"Ffmpeg - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ffmpeg covering 4 products with 463 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ffmpeg vulnerabilities, Ffmpeg security, Ffmpeg CVE, Ffmpeg threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":103,"@type":104,"name":105,"description":100,"url":106},"https:\u002F\u002Fschema.org","Organization","Ffmpeg","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fffmpeg",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":108,"apiVersion":109},"2026-10-17T00:42:03.493Z","3.0"]