Exploiting H.264 video decoders, yikes. https://wrv.github.io/h26forge.pdf
@matthew_d_green isn’t h.264 no longer included in most Linux distros by default? And most sites have moved to VP-9
@skymtf @matthew_d_green unfortunately the latter is definitely not accurate. There's slight progress on the AV1 front but VP9 definitely doesn't have the same level of support across devices. Also the attack is really on the overall infrastructure, not any specific codec (H264/AVC just happens to be widely hardware-accelerated)