Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-8461

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-8461.

Coverage Span: 2026-06-22
Reports: 1 related reports

Associated Reports & Timeline

PixelSmash – Critical FFmpeg Vulnerability Turns Media Files into Weapons

JFrog discloses PixelSmash (CVE-2026-8461), a CVSS 8.8 FFmpeg MagicYUV heap bug where a crafted 50 KB media file yields RCE against apps like Jellyfin and Nextcloud; fixed in 8.1.2.