that’s the issue with these newer models. they are able to string together a sequence of “not-serious” bugs in a system that ultimately results in some serious vulnerabilities.

it may not be an issue for ffmpeg, but it might be for an application that bundles ffmpeg.

No, you're not. It's a minor bug, probably with an easy fix, that deserves to be fixed. It's not worthy of front page HN...

I guess it’s submitted for the method rather than the result.

everyone knows HN only accepts security write-ups /s