We found a division by zero bug in FFmpeg with a vibecoded fuzzer(code.ffmpeg.org)
288 points by dclavijo 13 days ago | 251 comments
tl;dr: Summary not available.
HN Discussion:
  • Bug is not a real security issue, just a benign crash on bad data with custom AVIO
  • Bug is already known, patched in April with prior discussion in 2024
  • AI/LLM fuzzing lowers the cost of bug hunting and is unsurprisingly effective on complex C codebases
  • The writeup is hard to parse through AI-generated fluff, obscuring what the fuzzer actually does
  • ~Static analysis could catch division-by-zero without needing a fancy fuzzer