119
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs (thehackernews.com)
submitted 5 months ago by to c/technology@lemmy.world
35 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 34 points 5 months ago (4 children)

Its not like its a system service that you can get ingress through..

With a competently crafted payload, you could perhaps get in via someone's transcoding pipeline.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 5 months ago (3 children)

    Does nobody isolate ffmpeg and friends from their application?

    I can't imagine you'd have much fun breaking into a container that terminates the moment the original ffmpeg stops, or over-runs its max execution time..

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •