Skip to content
OpenAdvisories
Medium WID-SEC-2026-3820 9 CVEs

ffmpeg: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Oct 8, 2026 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Product

Das FFmpeg-Projekt besteht aus freien Programmen und Bibliotheken, die es ermöglichen, digitales Video- und Audiomaterial aufzunehmen, zu konvertieren, zu streamen und abzuspielen. Zudem enthält es mit libavcodec eine Audio- und Video-Codec-Sammlung, die verschiedene Codecs zur Verfügung stellt.

Vulnerabilities 9

  • Medium 6.5
    CVE-2026-107695

    FFmpeg before 8.1.3 HLS Demuxer Infinite Loop via Self-Referencing Playlist

    FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playlist tags inside Media Playlists. Attackers can trick victims into opening a cra…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Medium 6.5
    CVE-2026-107696

    FFmpeg through 9.0.2 Infinite Loop via RTSP Redirect Handling in rtsp.c

    FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers controlling an RTSP server can answer every request with a 302 redirect to itself or …

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Medium 5.9
    CVE-2026-107675

    FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

    FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Attackers performing man-in-the-middle, DNS, or ARP spoofing can capture passwords…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Medium 5.4
    CVE-2026-107698

    FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling

    FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without validating the Location URL. Malicious RTSP servers can redirect FFmpeg to inter…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu
  • Medium 4.8
    CVE-2026-107660

    FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts

    FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections t…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Medium 4.7
    CVE-2026-107677

    FFmpeg through 9.0.2 DASH Demuxer Infinite Loop via Empty SegmentTemplate Media

    FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media URL. Attackers can craft an .mpd manifest declaring SegmentTemplate media="" so g…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Medium 4.7
    CVE-2026-107678

    FFmpeg through 9.0.2 Stack Exhaustion via Recursive Free of pssh Boxes

    FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov_read_pssh(). Attackers can supply a craft…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2026-107697

    FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()

    FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use …

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi
  • Low 3.3
    CVE-2026-107676

    FFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer

    FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/…

    FFmpeg FFmpeg ffmpeg ffmpeg Debian Ubuntu Wolfi

Revision history

  1. #1

    Initiale Fassung

References