Skip to content
VulniPulse
Sign in
Highest advisory severityHigh 1 vendor · 1 advisory

CVE-2026-8461

CVE-2026-8461: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityHigh8.8

    High [CVE-2026-8461] Remote code execution via out-of-bounds write in MagicYUV decoder

    CVE-2026-8461Source published Source updated

    An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This issue affects FFmpeg before version 8.1.2. In other scenarios, it may lead to a denial-of-service, making the system unavailable. A remote attacker could exploit this flaw by providing a specially crafted media file, potentially leading to arbitrary code execution or a denial of service on affected Red Hat Enterprise Linux AI and Red Hat OpenShift AI systems. The impact is considered Important due to the potential for remote code execution without requiring complex attack vectors. Red Hat severity: Important — CVSS 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Weakness: CWE-787.…

    Affected products in this advisory
    • Red Hat Enterprise Linux AI 3.0 for RHEL 9
    • Red Hat Enterprise Linux AI 3.5 for RHEL 9
    • Red Hat AI Inference Server
    • Red Hat Enterprise Linux AI (RHEL AI) 3

    1 more entries in the full advisory.

    Source-reported affected versions
    • < 8.1.2
    Source-reported fixed versions
    • ffmpeg-0:6.1.6-9.el9ai
    • ffmpeg-0:6.1.6-1.el9ai
    • RHSA-2026:74089
    • RHSA-2026:43711
    Mitigation guidance
    • Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features