The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125206: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder's get_alpha_data() that…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125204: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow in ff_libwebp_get_frame() in libwebpenc_common.c that lets…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125203: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the Cook multichannel decoder…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125202: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125201: FFmpeg: FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vk_av1_decode_slice()…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125198: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125197: FFmpeg: FFmpeg through 9.0.2 contains an integer underflow in decode_frame() in libavcodec/lcldec.c that allows attackers to…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125196: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in liboapve_encode() in libavcodec/liboapvenc.c that…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125195: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in adpcm_encode_frame() in…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125193: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy422() in…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125192: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in libavcodec/dxa.c that allows…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125190: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in decode_mvc2() in libavcodec/mvcdec.c that…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125188: FFmpeg: FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in libavcodec/proresenc_anatoliy.c that occurs…2.5 Low2.0 LowN/ANov 9, 2026
CVE-2026-125184: FFmpeg: FFmpeg 6.1 through 9.0.2 contains an information disclosure vulnerability in the CamStudio decoder (libavcodec/cscd.c)…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125182: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Cook decoder joint_decode() function because…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125181: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in flic_decode_frame_15_16BPP() in…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125179: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the VQA video decoder in libavcodec/vqavideo.c…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125178: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdsc_load_cursor() in libavcodec/tdsc.c,…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125177: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125176: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decode_hybrid() in libavcodec/flashsv.c…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125175: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsv_decode_block() in libavcodec/flashsv.c…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125172: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125171: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Musepack SV7 decoder because…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125170: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targa_decode_rle() in…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125103: FFmpeg: FFmpeg through 9.0.2 contains an information disclosure vulnerability in ff_mlz_decompression() in libavcodec/mlz.c,…3.3 Low4.8 MediumN/ANov 9, 2026
176-200 of 427771