CVE-2026-8461

EUVD-2026-37878
An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution.

 This vulnerability is associated with the file libavcodec/magicyuv.C.



This issue affects FFmpeg before version 8.1.2.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
JFROGCNA
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 74.15%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux AI 3.5 for RHEL 9
0:6.1.6-1.el9ai ≤
𝑥
< *
ADP
ffmpegffmpeg
𝑥
< 8.1.2
CNA
Debian logo
Debian Releases
Debian Product
Codename
ffmpeg
bookworm
vulnerable
bookworm (security)
vulnerable
forky
7:8.1.2-2
fixed
sid
7:8.1.2-2
fixed
trixie
7:7.1.5-0+deb13u1
fixed
trixie (security)
7:7.1.5-0+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ffmpeg
bionic
needs-triage
focal
Fixed 7:4.2.7-0ubuntu0.1+esm17
released
jammy
Fixed 7:4.4.2-0ubuntu0.22.04.1+esm16
released
noble
needs-triage
questing
ignored
resolute
needs-triage
xenial
needs-triage
libav
jammy
dne
noble
dne
questing
dne
resolute
dne
trusty
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libavcodec-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise workstation 15 SP7
3.4.2-150200.11.76.1
fixed
libavcodec57
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libavcodec58_134
suse enterprise desktop 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise sap 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise sap 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise server 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise server 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise workstation 15 SP7
4.4.8-150600.13.52.1
fixed
libavformat-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise workstation 15 SP7
3.4.2-150200.11.76.1
fixed
libavformat57
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise workstation 15 SP7
3.4.2-150200.11.76.1
fixed
libavformat58_76
suse enterprise desktop 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise sap 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise sap 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise server 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise server 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise workstation 15 SP7
4.4.8-150600.13.52.1
fixed
libavresample-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise workstation 15 SP7
3.4.2-150200.11.76.1
fixed
libavresample3
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise workstation 15 SP7
3.4.2-150200.11.76.1
fixed
libavutil-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libavutil55
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libavutil56_70
suse enterprise desktop 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise sap 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise sap 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise server 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise server 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise workstation 15 SP7
4.4.8-150600.13.52.1
fixed
libpostproc-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libpostproc54
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libpostproc55_9
suse enterprise sap 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise server 15 SP4
4.4.8-150400.3.72.1
fixed
libswresample-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libswresample2
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libswresample3_9
suse enterprise desktop 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise sap 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise sap 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise server 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise server 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise workstation 15 SP7
4.4.8-150600.13.52.1
fixed
libswscale-devel
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libswscale4
suse enterprise desktop 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise sap 15 SP7
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP4
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP5
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP6
3.4.2-150200.11.76.1
fixed
suse enterprise server 15 SP7
3.4.2-150200.11.76.1
fixed
libswscale5_9
suse enterprise desktop 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise sap 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise sap 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise server 15 SP4
4.4.8-150400.3.72.1
fixed
suse enterprise server 15 SP7
4.4.8-150600.13.52.1
fixed
suse enterprise workstation 15 SP7
4.4.8-150600.13.52.1
fixed
Common Weakness Enumeration
References
https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23159
https://access.redhat.com/errata/RHSA-2026:43711
https://access.redhat.com/security/cve/CVE-2026-8461
https://bugzilla.redhat.com/show_bug.cgi?id=2490308
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8461.json