Screenshot that says: Important caveat: ASLR was disabled for this demonstration. Our exploit requires hardcoded addresses for system() and the OOB command string, which means it works deterministically only with ASLR disabled (setarch x86_64 -R). In a default Linux configuration with ASLR enabled, the addresses are randomized on every execution, and the exploit does not land. However, we identified a separate information leak vulnerability in FFmpeg’s FlashSV decoder (libavcodec/flashsv.c) – an uninitialized heap memory disclosure that has been present in upstream FFmpeg since July 2022 and remains unfixed as of the time of publication. It can be exploited only when using specific environment flags for ffmpeg (e.g., -threads 1) – hence the severity is only informational. In principle, a similar info leak that might be found in the future could be chained with the MagicYUV OOB write to defeat ASLR and achieve RCE under full mitigations – but this chaining requires additional research and has not been demonstrated. The MagicYUV OOB write alone (without ASLR bypass) is sufficient for reliable DoS against every tested target.