iphones have already CVEs from memory safety issued in image formats. is entirely plausible that a similar issue could exist in video or audio codecs

The parser is attack surface, but that's the only part of something like Photoshop that has to be secure. The actual editing features can be insecure.