DEBIAN-CVE-2026-112010

smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...