CVE-2026-8461

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 22, 2026

Last Seen

August 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical FFmpeg Vulnerability Enables Remote Code Execution via Malicious Media Files72.9

A critical vulnerability in FFmpeg's MagicYUV decoder, tracked as CVE-2026-8461, allows attackers to exploit heap out-of-bounds writes to crash systems or execute remote code. Discovered by JFrog, the flaw affects a wide range of applications that utilize FFmpeg, including media servers like Jellyfi...

Critical Vulnerabilities in ffmpeg Affecting openSUSE and SUSE Systems72.0

A series of vulnerabilities in ffmpeg-4 have been disclosed, affecting openSUSE and SUSE systems. The vulnerabilities include CVE-2026-8461, CVE-2026-12706, CVE-2026-64830, CVE-2026-64832, CVE-2026-64835, CVE-2026-66038, and CVE-2026-66039, which can lead to denial of service, arbitrary code executi...