{"id":"CVE-2026-95121","revision":"9e55156fe7f549c69572d557343e3059","records":[{"revision":"9e55156fe7f549c69572d557343e3059","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-95121","aliases":[],"title":"An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unc…","description":"An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction","state":0,"publishedAt":"2026-10-13T00:00:00+00:00","modifiedAt":"2026-10-14T19:19:28.081+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/TechSmith/mp4v2/issues/98","https://github.com/TechSmith/mp4v2/pull/100","https://github.com/TechSmith/mp4v2/pull/100/changes/c7f4e1da1b75996a053b05b69be8e738bf77a26c","https://gist.github.com/1820893135-pixel/c56b6a1627453e67ca2fb7e29bae95c6"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-95121","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-95121","identifiers":["CVE-2026-95121"]},"retained":false,"historicalAffected":[]}],"coverage":[]}