CVE-2026-95121 in mp4v2info

Summary

by MITRE • 10/13/2026

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

MITRE

Reservation

09/22/2026

Disclosure

10/13/2026

Moderation

accepted

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-95121
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-95121
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-95121/

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!