FFmpeg fixes the PixelSmash vulnerability
The newly disclosed FFmpeg vulnerability dubbed PixelSmash could enable remote code execution on Jellyfin servers under certain conditions and cause denial of service (DoS) in applications including Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio. Tracked as CVE-2026-8461, the vulnerability was fixed in FFmpeg version 8.1.2.
CERT24