Anyone running FFmpeg[1] on untrusted input without sandboxing of some kind is being extremely negligent. It&#x27;s around a million lines of C that does tricky file format parsing and decoding.  There will definitely be bugs in any given version, and some of those bugs will be exploitable.<p>[1] Or any related tool (ffprobe, etc.), or any tool that uses the libav* libraries, or really any non-trivial multimedia processing tool...