ffmpeg-zero-days

The design is the vulnerability

Twenty one zero-days in FFmpeg are a symptom; the finding is an architecture that parses untrusted input with no enforced audit gate.