Maybe this isn't the point, but it's fixed now:
https://www.cve.org/CVERecord?id=CVE-2025-27091
>This vulnerability affects OpenH264 2.5.0 and earlier releases. Both Scalable Video Coding (SVC) mode and Advanced Video Coding (AVC) mode are affected by this vulnerability. OpenH264 software releases 2.6.0 and later contained the fix for this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.
rpm -q openh264
openh264-2.6.0-2.fc43.x86_64
This is on Fedora Workstation 43.