---
id: 5435
title: "21 Zero-Days in FFmpeg"
source_domain: depthfirst.com
source_url: "https://depthfirst.com/research/21-zero-days-in-ffmpeg"
published_at: "2026-06-02T12:00:00Z"
tags: ["rce", "zero-day", "memory-safety", "poc", "vulnerability-discovery", "ai-agent", "ffmpeg"]
phying_url: "https://phying.com/item/5435"
lang: en
---

# 21 Zero-Days in FFmpeg

## Summary

depthfirst's autonomous agent discovered 21 zero-day vulnerabilities in FFmpeg and produced reproducible PoC inputs at a fraction of typical cost; several bugs had lain latent for 15-20 years.

## Intelligence Metadata

- **Sources:** depthfirst.com
- **Published:** 2026-06-02T12:00:00Z
- **Original:** https://depthfirst.com/research/21-zero-days-in-ffmpeg
- **Phying News:** https://phying.com/item/5435