The Most Dangerous Codec in the World - Finding and Exploiting Vulnerabilities in H.264 Decoders

The Most Dangerous Codec in the World - Finding and Exploiting Vulnerabilities in H.264 Decoders

Explore the hidden complexities and security risks of modern video encoding standards, particularly H.264, in this 27-minute Black Hat conference talk. Delve into the obscure and opaque world of video decoder ecosystems, examining their privileged nature, lack of testing, and high exposure to potential vulnerabilities. Learn about H26Forge, a framework designed to craft video files that expose edge cases in H.264 decoders. Gain insights from experts Stephen Checkoway, Hovav Shacham, and Willy Vasquez as they uncover the dangers lurking within this widely used codec and discuss the implications for hardware accelerators and proprietary software components.