Live › vulnerability › CVE-2026-112010
Go to dashboardsmpeg, an MPEG decoding library, has an integer underflow in stream_header() in MPEGsystem.cpp where a crafted packet length wraps packet_size. A crafted MPEG file opened through SMPEG_new, SMPEG_new_rwops or SMPEG_new_data can trigger a reachable assertion or out-of-bounds copy that crashes the application.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that open MPEG files with smpeg through SMPEG_new, SMPEG_new_rwops or SMPEG_new_data, especially with files a user or remote party supplies. The sources say the impact is a crash, not code execution. Applications that never decode untrusted MPEG input can skip it.
No product ranges from the sources yet.
ldd on the binary or by searching the project for SMPEG_newEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reachable assertion or out-of-bounds copy, crashing the application.
This page as .md · .json · in your agent: get_signal("CVE-2026-112010")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.