#7
BleepingComputer
general
June 22, 2026 at 21:05 UTC
FFmpeg fixes PixelSmash flaw in widely used video decoder
By Bill Toulas
AI Summary
The FFmpeg PixelSmash flaw enables RCE on Jellyfin servers under specific conditions and DoS in widely deployed platforms including Kodi, Emby, Nextcloud, PhotoPrism, and OBS Studio through specially crafted media files parsed by libavcodec. A patch has been issued and is available in the latest FFmpeg release. The breadth of affected consumer and enterprise media applications makes this a high-priority patching item for both home lab operators and enterprise media infrastructure teams.
Relevance score: 83.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →