Developers catch an FFmpeg bug using an AI-vibecoded fuzzer

Prompting an AI to write a quick fuzzing script just broke FFmpeg.

Developers discovered a division-by-zero vulnerability in FFmpeg by writing an AI-assisted, "vibecoded" fuzzer script. The report surfaced on Hacker News, picking up 206 points and 158 comments.

Why it matters: FFmpeg handles media processing across vast chunks of the software ecosystem. The takeaway here is clear: disposable, AI-scripted security testing is now capable of tripping up core C infrastructure.

Know this: Fuzzing—feeding random inputs into a program until it crashes—used to take real setup time. Prompting an LLM to build quick test scripts lowers the barrier for finding deep edge-case bugs.

Turns out throwing AI-generated junk data at mature code bases is pretty effective.