CVE-2026-95121

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...

UBUNTU-CVE-2026-95121

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...

EUVD-2026-98805

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...

CVE-2026-95121

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction...

CVE-2026-95121

The mp4v2 library version 2.0.0 is vulnerable to arbitrary code execution due to an integer overflow (CWE-190) in the MP4RtpAtom::ReadHntiType() function located in src/atom_rtp.cpp. An attacker can exploit this by providing a specially crafted MP4 file that causes an undersized rtp atom to trigg...