Unrated severityNVD Advisory· Published Oct 13, 2026
CVE-2026-95121
CVE-2026-95121
Description
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction
Affected products
1Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.