The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125263: FFmpeg: FFmpeg 9.0 through 9.0.2 built with liblcevc_dec fails to validate LCEVC enhanced output dimensions against max_pixels…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125258: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in dovi_configure_ext() in libavcodec/dovi_rpuenc.c that…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125254: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in the VVC decoder because ff_vvc_slice_rpl() fails to…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125252: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapi_decode.c that allows attackers to exhaust…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125246: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in cbs_jpeg_assemble_fragment() that miscounts 0xff…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125245: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in ff_mjpeg_decode_sof() in libavcodec/mjpegdec.c, which…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125242: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vdpau.c that allows attackers to exhaust heap…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125240: FFmpeg: FFmpeg through 9.0.2 contains a resource leak vulnerability in svt_jpegxs_dec_decode() in libsvtjpegxsdec.c that leaks…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125238: FFmpeg: FFmpeg through 9.0.2 contains a reachable assertion vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125237: FFmpeg: FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125234: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpack_encode_init() in libavcodec/wavpackenc.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125232: FFmpeg: FFmpeg through 9.0.2 contains a division by zero vulnerability in estimate_motion_b() in libavcodec/motion_est.c,…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125231: FFmpeg: FFmpeg 4.4 through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/adxdec.c because…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125230: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in the pcm_rechunk bitstream filter that allows…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125226: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in sbg_read_header() in…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125225: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in aac_adtstoasc_filter() that allows attackers…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125224: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis_parser.c that re-parses invalid…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125223: FFmpeg: FFmpeg 8.0 through 9.0.2 contains a memory leak vulnerability in the VP9 decoder that allows attackers to exhaust…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125221: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in score_header() in libavcodec/flac_parser.c…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125220: FFmpeg: FFmpeg through 9.0.2 contains a deadlock vulnerability in mimic_decode_frame() in libavcodec/mimic.c that fails to…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125216: FFmpeg: FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/dpxenc.c that allows attackers to…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125215: FFmpeg: FFmpeg 7.1 through 9.0.2 contains a NULL pointer dereference vulnerability in ff_dovi_rpu_generate() in…4.7 Medium5.7 MediumN/ANov 9, 2026
CVE-2026-125207: FFmpeg: FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in the Interplay ACM decoder that allows…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125205: FFmpeg: FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1_frame_merge bitstream filter that…5.5 Medium6.8 MediumN/ANov 9, 2026
CVE-2026-125200: FFmpeg: FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265_encode_frame() never…5.5 Medium6.8 MediumN/ANov 9, 2026
176-200 of 427771