CVE-2026-8461 Vulnerable FFmpeg Version Below 9.0 Detected (MagicYUV)

Ethan Andrews@eandrews

•updated Jun 22, 2026•0•0•1

Identifies devices with FFmpeg installations below version 9.0 that include the vulnerable MagicYUV decoder (libavcodec), exposing the host to heap out-of-bounds write RCE via crafted AVI, MKV, or MOV files (CVE-2026-8461).