What’s Vulnerable › Vulnerabilities

CVE-2026-95121

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-13 · updated 2026-10-16
• Weakness: CWE-190

Description

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

References

• https://gist.github.com/1820893135-pixel/c56b6a1627453e67ca2fb7e29bae95c6
• https://github.com/TechSmith/mp4v2/issues/98
• https://github.com/TechSmith/mp4v2/pull/100
• https://github.com/TechSmith/mp4v2/pull/100/changes/c7f4e1da1b75996a053b05b69be8e738bf77a26c
• https://github.com/TechSmith/mp4v2/issues/98

Get alerted when CVE-2026-95121 or the next vulnerability affects your stack