← Database

CVE-2026-95121

N/A CVSS: N/A Published: 2026-10-13 Modified: 2026-10-13

Description

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

Affected Platforms

Unknown

Weakness Type

Unknown

References