CERT24FFmpeg fixes the PixelSmash vulnerabilityLoading data…

FFmpeg fixes the PixelSmash vulnerability

The newly disclosed FFmpeg vulnerability dubbed PixelSmash could enable remote code execution on Jellyfin servers under certain conditions and cause denial of service (DoS) in applications including Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio. Tracked as CVE-2026-8461, the vulnerability was fixed in FFmpeg version 8.1.2.

← Back to intelligence

FFmpeg fixes the PixelSmash vulnerability

The newly disclosed FFmpeg vulnerability dubbed PixelSmash could enable remote code execution on Jellyfin servers under certain conditions and cause denial of service (DoS) in applications including Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio. Tracked as CVE-2026-8461, the vulnerability was fixed in FFmpeg version 8.1.2.