# FFmpeg 6.1.6 — n6.1.6

- Product: FFmpeg (https://whatsnew.fyi/product/ffmpeg)
- Vendor: FFmpeg
- Date: 2026-06-20
- Version: 6.1.6
- Original notes: https://github.com/FFmpeg/FFmpeg/releases/tag/n6.1.6
- Permalink: https://whatsnew.fyi/product/ffmpeg/releases/6.1.6
- Labels: Machine-generated from commit messages — the vendor published no release notes

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — avformat/dashdec, dashenc, hlsenc, and demux now respect io_open set in AVFormatContext and use correct close function for custom io.
- **fixed** — avformat/oggparsecelt bounded extra_headers to avoid an effectively infinite loop.
- **fixed** — avcodec/hdrdec fixed pixel count decrement in RLE decompress loop.
- **fixed** — avcodec/hevc limited missing-ref fill to coded planes and tightened sh_num_tiles_in_slice_minus1 upper bound.
- **fixed** — avformat issues including Wave unaligned metadata chunks, vividas misaligned access, rtpenc_aac small packets, rtpenc_xiph max payload underflow, ty rec_size check, hls url_offset and size validation, and hls TIME-OFFSET validation.
- **fixed** — avcodec issues including diracdec mctmp buffer size and edge_emu_buffer overflow, g2meet stack size, jpeg2000dec mask computation and header variables, magicyuv MEDIAN slices and interlaced slice-height checks, h264_slice chroma-width underflow, vorbisdsp inverse coupling, and various overflow and bounds checks in cook, on2avc, truespeech, agm, rv10, and rv34 decoders.
- **fixed** — avfilter issues including boxblur off-by-one errors, af_join buffer dedup use-after-free, and vf_drawtext pixel_mode checks and glyph memory management.
- **fixed** — avformat/ftp now rejects CR/LF in URL path and non-printable ASCII characters to prevent command injection.
- **fixed** — Multiple buffer overflow, integer overflow, and bounds-checking fixes across swscale, swresample, and avfilter components including rgb2rgb, ppc VSX path, resample, v360, showcwt, convolution, showspectrum, snowenc, and icecast metadata validation.
- **fixed** — tools/zmqsend now frees the AVBprint buffer after using it and target_dem_fuzzer no longer exits on io_buffer allocation failure.