Medium severity5.5NVD Advisory· Published Oct 18, 2026· Updated Oct 18, 2026
CVE-2026-112009
CVE-2026-112009
Description
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashes applications opening it through SMPEG_new, SMPEG_new_rwops, or SMPEG_new_data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.0.0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.