Live › vulnerability › CVE-2026-58938
A flaw in the MPEG-4 parsing code (parseChunk in MPEG4Extractor.cpp) lets a malformed media file crash or stall the parser. An attacker gets remote denial of service, with no extra privileges and no user interaction needed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
The sources say only that remote denial of service is possible through improper input validation in the MPEG-4 extractor, with no extra privileges and no user interaction. They do not name affected products or versions, so the exposed systems are unknown.
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-58938")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.