ffmpeg has stated many many times that they don't care about bug or security reports