VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 18, 2026

Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder

CVE-2026-8461

Description

An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

This vulnerability is associated with the file libavcodec/magicyuv.C.

This issue affects FFmpeg before version 8.1.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Patches

Vulnerability mechanics

References

1

News mentions

5