NSO Group iMessage Zero-Click Exploit Captured in the Wild
Image and video decoders seem like exactly the right target for formally verified (i.e. proven) implementations.  There are just so many moving parts, and libraries get re-used in many projects, rarely forming the 'special sauce' in any given app.I have been keeping an eye on the work done by what is now called Project Everest[1] over the years in the communication and cryptographic space.Is there similar work in the image and video decode space?  My seach fu is not yeilding anything beyond some hardware decoding proofs.[1] https://project-everest.github.io/