21 Zero-Days in FFmpeg
depthfirst.com | research | #rce | #zero-day | #memory-safety | #poc | #vulnerability-discovery | #ai-agent | #ffmpeg
Summary
depthfirst's autonomous agent discovered 21 zero-day vulnerabilities in FFmpeg and produced reproducible PoC inputs at a fraction of typical cost; several bugs had lain latent for 15-20 years.
- Published
- Collected
--- id: 5435 title: "21 Zero-Days in FFmpeg" source_domain: depthfirst.com source_url: "https://depthfirst.com/research/21-zero-days-in-ffmpeg" published_at: "2026-06-02T12:00:00Z" tags: ["rce", "zero-day", "memory-safety", "poc", "vulnerability-discovery", "ai-agent", "ffmpeg"] phying_url: "https://phying.com/item/5435" lang: en --- # 21 Zero-Days in FFmpeg ## Summary depthfirst's autonomous agent discovered 21 zero-day vulnerabilities in FFmpeg and produced reproducible PoC inputs at a fraction of typical cost; several bugs had lain latent for 15-20 years. ## Intelligence Metadata - **Sources:** depthfirst.com - **Published:** 2026-06-02T12:00:00Z - **Original:** https://depthfirst.com/research/21-zero-days-in-ffmpeg - **Phying News:** https://phying.com/item/5435