CVE-2026-95121

An issue in mp4v2 2.0.0 allows an attacker to achieve arbitrary code execution . The vulnerability resides in the MP4RtpAtom::ReadHntiType() function within src/atom_rtp.cpp. A specially crafted MP4 file can trigger an unchecked offset subtraction in an undersized rtp atom, resulting in a near-2^...