3 ms·
> To me the severity has nothing to do with how popular is a code path, but whether that code path is accessible to an attacker. That's true for targeted attac
by beltsazar 2mo ago
> To me the severity has nothing to do with how popular is a code path, but whether that code path is accessible to an attacker.
That's true for targeted attacks. For untargeted attacks, attackers have little incentive to do the exploit.
- cm2187 2mo agoTargeted to what? ffmpeg? Ffmpeg is the OpenSSL of video transcoding, it is used absolutely everywhere. If there is a vulnerability in ffmpeg, any website that processes user supplied videos is vulnerable