8.8
Élevée
CVE-2026-8461 An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows…
Description
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| FFMPEG 8.1 | premières → < 8.1.2 | 8.1.2 |
| Red Hat AI Inference Server | Versions non publiées | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| Red Hat Enterprise Linux AI 3.5 for RHEL 9 | Versions non publiées |
Références
- code.ffmpeg.org code.ffmpeg.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de FFMPEG
Les 83 CVE de FFMPEG →
CVE-2026-120247
FFmpeg 2.3 through 9.0.2 contains a use of uninitialized resource vulnerability in the Huffyuv decoder that allows…
6.8
Moyenne
CVE-2026-120246
FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder
6.8
Moyenne
CVE-2026-120244
FFmpeg 2.1 through 9.0.2 contains a use of uninitialized resource vulnerability in the PCX decoder that allows attackers…
6.8
Moyenne
CVE-2026-120245
FFmpeg 0.10 through 9.0.2 contains a use of uninitialized resource vulnerability in sunrast_decode_frame() that leaks…
6.8
Moyenne