> It seems very unlikely that such a lib in itself has any cyber security risk as long as it itself does not query an external database through a network connec

> It seems very unlikely that such a lib in itself has any cyber security risk as long as it itself does not query an external database through a network connection. It almost certainly has tons, because it was not designed to read attacker-controlled images or data files. If someone uses it that manner, I would be absolutely shocked if it doesn't. The testing suite focuses exclusively on correctness and speed. > If you would discover some security issue, like a buffer overrun, would you fix it? No. I don't use this work; I no longer work in science; etc. It's just a gift to other people of several years of work and a ton of time in vtune making it go fast.