The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125228: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in put_vector() in…5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125227: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow in cbs_jpeg_write_scan() in libavcodec/cbs_jpeg.c that causes a heap…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125222: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in hap_parse_frame_header() in libavcodec/hapdec.c that…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125219: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vdpau_hevc_start_frame() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125218: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode_apng() function in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125217: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq_dpcm_encode_frame() in…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125214: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm_bluray_decode_frame() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125213: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the PSD decoder in libavcodec/psd.c that allows…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125212: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/videotoolboxenc.c that copies frames…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125211: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaption_trans_ass_subtitle()…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125210: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125209: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125208: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2_buffer_swframe_to_buf() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125206: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder's get_alpha_data() that…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125204: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow in ff_libwebp_get_frame() in libwebpenc_common.c that lets…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125203: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the Cook multichannel decoder…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125202: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125201: FFmpeg: FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vk_av1_decode_slice()…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125198: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125197: FFmpeg: FFmpeg through 9.0.2 contains an integer underflow in decode_frame() in libavcodec/lcldec.c that allows attackers to…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125196: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in liboapve_encode() in libavcodec/liboapvenc.c that…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125195: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in adpcm_encode_frame() in…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125193: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy422() in…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125192: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in libavcodec/dxa.c that allows…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125190: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in decode_mvc2() in libavcodec/mvcdec.c that…3.3 Low4.8 MediumN/ANov 9, 2026
451-475 of 420658