FFmpeg 2.3
Support for FFmpeg 2.3 ended on 06/01/2015. There are no more security updates for this branch.
Latest version: 2.3.6, released on 06/01/2015
End of support: 06/01/2015
137 known vulnerabilities open in 2.3.6
Vulnerabilities in FFmpeg 2.3
144 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.
- CVE-2026-40962, CVSS 3.1: 9.8: still open in 2.3.6
- CVE-2019-17542, CVSS 3.1: 9.8: still open in 2.3.6
- CVE-2019-17539, CVSS 3.1: 9.8: still open in 2.3.6
- CVE-2019-12730, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2018-1999010, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2017-7866, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2017-7865, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2017-7863, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2017-7862, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2017-7859, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2016-6164, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2016-10192, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2016-10191, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2016-10190, CVSS 3.0: 9.8: still open in 2.3.6
- CVE-2026-30754, CVSS 3.1: 8.8: still open in 2.3.6
- CVE-2019-15942, CVSS 3.1: 8.8: still open in 2.3.6
- CVE-2018-9841, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2018-1999011, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2017-9992, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2017-9990, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2017-15672, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2017-14767, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2016-2330, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2016-2329, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2016-2328, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2016-2327, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2016-2326, CVSS 3.0: 8.8: still open in 2.3.6
- CVE-2026-66040, CVSS 4.0: 8.7: still open in 2.3.6
- CVE-2026-66039, CVSS 4.0: 8.7: still open in 2.3.6
- CVE-2026-64834, CVSS 4.0: 8.7: still open in 2.3.6
- CVE-2026-64830, CVSS 4.0: 8.7: still open in 2.3.6
- CVE-2026-70628, CVSS 4.0: 8.5: still open in 2.3.6
- CVE-2015-8661, CVSS 3.0: 8.3: still open in 2.3.6
- CVE-2022-48434, CVSS 3.1: 8.1: still open in 2.3.6
- CVE-2026-96611, CVSS 3.1: 7.8: still open in 2.3.6
- CVE-2017-9994, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2017-9991, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2017-11719, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2017-11399, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2016-7502, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2016-7450, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2016-6671, CVSS 3.0: 7.8: still open in 2.3.6
- CVE-2026-66036, CVSS 4.0: 7.7: still open in 2.3.6
- CVE-2026-30999, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2026-30998, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2026-30997, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2024-31578, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2023-6603, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2022-3109, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2021-38291, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2018-15822, CVSS 3.1: 7.5: still open in 2.3.6
- CVE-2017-9993, CVSS 3.0: 7.5: still open in 2.3.6
- CVE-2016-6920, CVSS 3.0: 7.5: still open in 2.3.6
- CVE-2015-8219, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-8217, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-8216, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6826, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6825, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6824, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6823, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6822, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6821, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6820, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6819, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2015-6818, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-9604, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-9603, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-9602, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8549, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8548, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8547, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8546, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8545, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8544, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8543, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8542, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-8541, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-7937, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2014-7933, CVSS 2.0: 7.5: still open in 2.3.6
- CVE-2026-65704, CVSS 4.0: 7.3: still open in 2.3.6
- CVE-2015-8662, CVSS 3.0: 7.3: still open in 2.3.6
- CVE-2023-6605, CVSS 3.1: 7.2: still open in 2.3.6
- CVE-2026-66038, CVSS 4.0: 7.1: still open in 2.3.6
- CVE-2026-66037, CVSS 4.0: 7.1: still open in 2.3.6
- CVE-2026-64833, CVSS 4.0: 7.1: still open in 2.3.6
- CVE-2026-52297, CVSS 3.1: 7.1: still open in 2.3.6
- CVE-2026-52296, CVSS 3.1: 7.1: still open in 2.3.6
- CVE-2026-107696, CVSS 4.0: 7.1: still open in 2.3.6
- CVE-2026-107695, CVSS 4.0: 7.1: still open in 2.3.6
- CVE-2024-7272, CVSS 4.0: 6.9: still open in 2.3.6
- CVE-2024-7055, CVSS 4.0: 6.9: still open in 2.3.6
- CVE-2026-70631, CVSS 4.0: 6.8: still open in 2.3.6
- CVE-2015-8218, CVSS 2.0: 6.8: still open in 2.3.6
- CVE-2015-6761, CVSS 2.0: 6.8: still open in 2.3.6
- CVE-2015-1872, CVSS 2.0: 6.8: still open in 2.3.6
- CVE-2025-25469, CVSS 3.1: 6.5: still open in 2.3.6
- CVE-2025-25468, CVSS 3.1: 6.5: still open in 2.3.6
- CVE-2018-7751, CVSS 3.0: 6.5: still open in 2.3.6
- CVE-2018-6912, CVSS 3.0: 6.5: still open in 2.3.6
- CVE-2018-6621, CVSS 3.1: 6.5: still open in 2.3.6
And 44 more.
1 vulnerability of FFmpeg has no version information in the NVD and is not assigned to any branch.
Get notified
Add FFmpeg with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add FFmpeg 2.3