One chained sandbox escape away from compromise.
Which is of course better than zero sandbox escapes.
Ahah
But are the compiler+OS that runs the ffmpeg executable really a sandbox ?
Which is of course better than zero sandbox escapes.