EbonJaeger the firefox weekly update are interesting to read when I make the time to scan changelog:
"CVE-2023-5217 A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a web browser that is compiled with this library."
these things are probably more common than I thought. As a layman I think either bad guy tried to implement or a white hat go there first..