AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

Key Points:

• 21 zero-day vulnerabilities were discovered in FFmpeg by an AI agent, with several bugs dating back over 20 years.
• The vulnerabilities primarily involve heap and stack overflows in various components, posing significant risks to systems using FFmpeg for media processing.
• Immediate actions include updating FFmpeg to the latest fixed version and ensuring all embedded copies in applications and containers are patched.

Technical Details: The identified vulnerabilities include CVE-2026-39210 through CVE-2026-39218, with additional unnumbered zero-days. These vulnerabilities can lead to arbitrary code execution if exploited.

MITRE ATT&CK Techniques: None mentioned

IOCs Mentioned:

• CVE-2026-39210
• CVE-2026-39211
• CVE-2026-39212
• CVE-2026-39213
• CVE-2026-39214
• CVE-2026-39215
• CVE-2026-39216
• CVE-2026-39217
• CVE-2026-39218