{"uuid": "322f7116-4897-4765-b4b4-031c3e06dead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8461", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3movwrv5h7f2m", "content": "CVE-2026-8461: FFmpeg MagicYUV decoder CRITICAL heap bug enables DoS/RCE via crafted AVI/MKV/MOV files. Patch to 8.1.2 immediately. Impacts Jellyfin, Nextcloud, more. https://radar.offseq.com/threat/ffmpeg-fixes-pixelsmash-flaw-in-widely-used-video--5ccb783d6ccf419b #OffSeq #FFmpeg #MediaSecurity", "creation_timestamp": "2026-06-22T22:30:16.662594Z"}