floquant

I would find it even more pathetic in that case?

Eh, you know what they say, the best time was years ago, the second best time is right now

So you think they either actively exploited ffmpeg or sold an exploit?

Back in my day, zero-day meant exploited in the wild first, described publicly later. Or a disclosure without involving the target with an exploit attached.