CVE-2026-112010 — smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet …
Published: 2026-10-18 · CVSS: 6.8 · CVSS 4.0
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reachable assertion or out-of-bounds copy, crashing the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7