FFMPEG v8.1.1 vulnerabilities
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 5.4k
- Forks
- 1k
- Avg merge
- 22h 17m
- Merged PRs (30d)
- 3
Description
The following vulnerabilities have been identified in the ffmpeg binaries shipped with version v5.0.0.93 of this package.
| NAME | SEVERITY | VULNERABILITY | INSTALLED | FIXED IN |
|---|---|---|---|---|
| ffmpeg | High | CVE-2026-70632 | v8.1.1 | v9 |
| ffmpeg | High | CVE-2026-70628 | v8.1.1 | v9 |
| ffmpeg | Medium | CVE-2026-70631 | v8.1.1 | v9 |
| ffmpeg | Medium | CVE-2026-70629 | v8.1.1 | v9 |
| ffmpeg | Medium | CVE-2026-70630 | v8.1.1 | v9 |
Files
libavcodec-c4204469.so.62.28.101libavformat-4762a711.so.62.12.101libavutil-befbbc48.so.60.26.101libswresample-2dfded3b.so.6.3.101
References
- #1258
- #1248
- #1255
- #1261
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing references #1258, #1248, #1255, and #1261, then locate the packaging or build entry point that produces the listed shared libraries. Confirm how the shipped ffmpeg version is selected and verify that the resulting packages no longer include v8.1.1 or the five listed CVEs, with the update to v9 reflected in the built artifacts.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100