Repository navigation
[BUG] FFmpeg 8.1 is vulernable to CVE-2026-8461 #125
Description
Is there an existing issue for this?
- I have searched the existing issues
Current Behavior
The current version of FFmpeg 8.1 is vulnerable to CVE-2026-8461 and needs to be updated to 8.1.2 to resolve.
Expected Behavior
No response
Steps To Reproduce
If you run the following command: ffmpeg -decoders 2>/dev/null | grep magicyuv and get a response similar to this: VFS..D magicyuv MagicYUV video, based on this: https://jfrog.com/blog/pixelsmash-critical-ffmpeg-vulnerability-turns-media-files-into-weapons/ then FFmpeg is vulnerable.
Environment
NADocker creation
NAContainer logs
ffmpeg -decoders 2>/dev/null | grep magicyuv
VFS..D magicyuv MagicYUV video
Activity
github-actions commentedon Jun 25, 2026
Thanks for opening your first issue here! Be sure to follow the relevant issue templates, or risk having this issue marked as invalid.
SergeantPanda commentedon Jun 25, 2026
Thank you for the fast turn-around. Any idea how long until the packages get built?
Edit: Nevermind, I think I can see it is actively building. I had looked under actions and didn't see it but I can now see that you use an external builder.