CVE-2026-112010Published
smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-112010 · Microsoft / collected KEV context
cve-program · CVE-2026-112010
- https://hackmd.io/@haindpwn/smpeg-system-header-stream-table-oob-read
- https://github.com/icculus/smpeg/blob/d188dc111f4817288718705e4a84e248803ccfdc/MPEGsystem.cpp#L295-L350
- https://github.com/icculus/smpeg/blob/d188dc111f4817288718705e4a84e248803ccfdc/MPEGsystem.cpp#L777
- https://github.com/icculus/smpeg
- https://www.vulncheck.com/advisories/smpeg-through-2.0.0-integer-underflow-via-stream-header-in-mpegsystem-cpp
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.