CVE-2026-112009 smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer

smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashe...