CVE-2026-95121 in mp4v2info

Zusammenfassung

von MITRE • 13.10.2026

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

MITRE

Reservieren

22.09.2026

Veröffentlichung

13.10.2026

Moderieren

akzeptiert

Eintrag

VDB-417732

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

Do you want to use VulDB in your project?

Use the official API to access entries easily!