themachinestops@lemmy.dbzer0.com to Technology@lemmy.worldEnglish · 16 days agoAI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugsthehackernews.comexternal-linkmessage-square30linkfedilinkarrow-up118arrow-down14
arrow-up114arrow-down1external-linkAI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugsthehackernews.comthemachinestops@lemmy.dbzer0.com to Technology@lemmy.worldEnglish · 16 days agomessage-square30linkfedilink
minus-squareVibeSurgeon@piefed.sociallinkfedilinkEnglisharrow-up1·16 days ago Its not like its a system service that you can get ingress through… With a competently crafted payload, you could perhaps get in via someone’s transcoding pipeline.
minus-squaregreyscale@lemmy.grey.ooolinkfedilinkEnglisharrow-up0·16 days agoDoes nobody isolate ffmpeg and friends from their application? I can’t imagine you’d have much fun breaking into a container that terminates the moment the original ffmpeg stops, or over-runs its max execution time…
minus-square[object Object]@lemmy.calinkfedilinkEnglisharrow-up1·16 days agoContainer escapes do exist, and they have shared kernel with the host
With a competently crafted payload, you could perhaps get in via someone’s transcoding pipeline.
Does nobody isolate ffmpeg and friends from their application?
I can’t imagine you’d have much fun breaking into a container that terminates the moment the original ffmpeg stops, or over-runs its max execution time…
Container escapes do exist, and they have shared kernel with the host