From Signal’s blog post: > As just one example (unrelated to what follows), their software bundles FFmpeg DLLs that were built in 2012 and have not been update

From Signal’s blog post: > As just one example (unrelated to what follows), their software bundles FFmpeg DLLs that were built in 2012 and have not been updated since then. This purported vulnerability is not related to FFmpeg in any way, hence the disclaimer.