that’s the issue with these newer models. they are able to string together a sequence of “not-serious” bugs in a system that ultimately results in some serious vulnerabilities.

it may not be an issue for ffmpeg, but it might be for an application that bundles ffmpeg.