CVE-2026-95121

7.8 HIGHpublic exploit available

Published 2026-10-13 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-190

Public exploit & PoC references

https://gist.github.com/1820893135-pixel/c56b6a1627453e67ca2fb7e29bae95c6
https://github.com/TechSmith/mp4v2/issues/98
https://github.com/TechSmith/mp4v2/pull/100
https://github.com/TechSmith/mp4v2/pull/100/changes/c7f4e1da1b75996a053b05b69be8e738bf77a26c
https://github.com/TechSmith/mp4v2/issues/98

All references

https://gist.github.com/1820893135-pixel/c56b6a1627453e67ca2fb7e29bae95c6
https://github.com/TechSmith/mp4v2/issues/98
https://github.com/TechSmith/mp4v2/pull/100
https://github.com/TechSmith/mp4v2/pull/100/changes/c7f4e1da1b75996a053b05b69be8e738bf77a26c
https://github.com/TechSmith/mp4v2/issues/98

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-14181PoC
UNSCOREDCVE-2025-58771
HIGHCVE-2026-100136
HIGHCVE-2026-100208
MEDIUMCVE-2026-101279
HIGHCVE-2026-101944
HIGHCVE-2026-101945
MEDIUMCVE-2026-101972

Related by shared AI tags and CWE weakness class. Browse the full archive.