CVE-2025-63757High· 7.5▾ TwilightInteger overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Integer overflow vulnerability in the yuv2ya16_X_c_template function in libswscale/output.c in FFmpeg 8.0.
ffmpeg = 8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-96611Medium· 6.9FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c
CVE-2026-30754High· 8.8A memory corruption vulnerability exists in FFmpeg before 8.1
CVE-2026-75147High· 7.1FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c
CVE-2026-75144High· 7.8FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer
CVE-2026-75145Medium· 5.8FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer
CVE-2026-75143Critical· 9.8FFmpeg Heap Buffer Overflow via RIST Protocol Reader