Synced 17 Jun 2026 06:32 UTC Account

Is FFmpeg 2.3.6 patched?

FFmpeg · cycle 2.3 · end of life · Official site ↗
2.3.65/100End of life

Current stable (8.1.1): 94/100

Health score5/100
Open issues112
Exploited now0
Cycle 2.3 EOL2015-01-06
Latest release8.1.1

Summary iPlain-English security status for FFmpeg 2.3.6, built from its CVEs, active-exploitation data, end-of-life date and latest release.

FFmpeg 2.3.6 is part of the 2.3 release line. 112 known vulnerabilities affect it. The 2.3 line reached end-of-life on 2015-01-06, so it no longer receives security patches. The latest supported FFmpeg release is 8.1.1.

Known issues affecting 2.3.6

Exploited first, then by exploitation probability.

CVE-2017-9993 HIGH EPSS 16% → fixed in 3.3.2 CVE-2016-1897 MEDIUM EPSS 15% → see advisory CVE-2016-1898 MEDIUM EPSS 13% → see advisory CVE-2016-10190 CRITICAL EPSS 8% → see advisory CVE-2016-10191 CRITICAL EPSS 7% → see advisory CVE-2016-10192 CRITICAL EPSS 6% → see advisory CVE-2017-9608 MEDIUM EPSS 5% → fixed in 3.3.3 CVE-2018-1999011 HIGH EPSS 4% → see advisory CVE-2018-15822 HIGH EPSS 3% → see advisory CVE-2014-8544 HIGH EPSS 3% → see advisory CVE-2018-1999010 CRITICAL EPSS 3% → fixed in 3.4.3 CVE-2014-8545 HIGH EPSS 3% → see advisory CVE-2014-8543 HIGH EPSS 3% → see advisory CVE-2014-8546 HIGH EPSS 3% → see advisory CVE-2014-8547 HIGH EPSS 3% → see advisory CVE-2019-12730 CRITICAL EPSS 3% → fixed in 3.2.14 CVE-2014-7933 HIGH EPSS 3% → see advisory CVE-2017-9992 HIGH EPSS 3% → fixed in 3.3.1 CVE-2016-6920 HIGH EPSS 3% → see advisory CVE-2017-14767 HIGH EPSS 3% → see advisory

Other FFmpeg versions

Check another release line of FFmpeg.

FFmpeg 8.1.1FFmpeg 8.0.2FFmpeg 7.1.4FFmpeg 7.0.3FFmpeg 6.1.5FFmpeg 6.0.1FFmpeg 5.1.9FFmpeg 5.0.3FFmpeg 4.4.7FFmpeg 4.3.9FFmpeg 4.2.11FFmpeg 4.1.11FFmpeg 4.0.6FFmpeg 3.4.14FFmpeg 3.3.9FFmpeg 3.2.19FFmpeg 3.1.11FFmpeg 3.0.12FFmpeg 2.8.22FFmpeg 2.7.7FFmpeg 2.6.9FFmpeg 2.5.11FFmpeg 2.4.14FFmpeg 2.2.16FFmpeg 2.1.8FFmpeg 2.0.7FFmpeg 1.2.12FFmpeg 1.1.16FFmpeg 1.0.10FFmpeg 0.11.5FFmpeg 0.10.16FFmpeg 0.9.4FFmpeg 0.8.15FFmpeg 0.7.17FFmpeg 0.6.7FFmpeg 0.5.15

Frequently asked

Is FFmpeg 2.3.6 patched?

FFmpeg 2.3.6 is end-of-life and no longer receives security patches. Move to 8.1.1.

When does FFmpeg 2.3 reach end-of-life?

FFmpeg 2.3 reached end-of-life on 2015-01-06 and no longer receives security patches.

What is the latest version of FFmpeg?

The latest supported FFmpeg release is 8.1.1.

Is FFmpeg 2.3.6 still receiving security updates?

No — FFmpeg 2.3.6 is on the 2.3 line, which reached end-of-life on 2015-01-06 and no longer receives security updates. Upgrade to 8.1.1 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against FFmpeg's official advisory before you patch or upgrade — FFmpeg official site ↗