Out-of-bounds Write Vulnerability in FFmpeg's Libavcodec Library

CVE-2026-8461

What is CVE-2026-8461?

An out-of-bounds write vulnerability has been identified in the libavcodec library of FFmpeg, particularly within the MagicYUV decoder. This flaw may lead to denial-of-service conditions and has the potential to be exploited for remote code execution. The issue arises from improper handling of certain inputs, resulting in memory corruption. Affected versions of FFmpeg must be updated to version 8.1.2 or later to mitigate these security risks.

References