AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
https://www.debian.org/security/2023/dsa-5490
https://security.gentoo.org/glsa/202401-32
https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html
https://bugs.chromium.org/p/aomedia/issues/detail?id=2905&q=&can=1