Pixelsmash Vulnerability in ffmpeg (CVE-2026-8461) - Is Emby vulnerable?

[CHBMB 4]

With the public announcement of pixelsmash (see CVE report here) Could we get some clarity regarding where we stand with Emby and this vulnerability please?

It appears Jellyfin have already fixed it and were notified about t he vulnerability before it was made public, and Plex isn't vulnerable due to their customisation of ffmpeg.

I couldn't find any information regarding where Emby sits with regard to this and would appreciate some clarity.

Thanks

 

 

Edited 4 hours ago by CHBMB
Improve title

[Pejamas 63]

Came here straight after seeing the jellyfin post on reddit expecting to see an update.

[CHBMB 4]

I've sent a PM to the Emby devs as well, but, whilst it's been read by one of them, no reply as of yet.