Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112009— smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer

Quick assessment

Affected
icculus smpeg
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

SMPEG 2.0.0 及更早版本在 函数中存在堆越界读取漏洞。攻击者可通过构造特殊的系统头流表（system header stream table），使程序读取超出 16384 字节缓冲区范围的数据。具体而言，攻击者可提供一段 MPEG 文件，其流表字节的高位（high bit）全部被置为 1；当应用程序通过 、 或 接口打开该文件时，将导致崩溃。

CVSS 5.5 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112009

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer
Source: CVE Program / CVE List V5
Vulnerability Description
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashes applications opening it through SMPEG_new, SMPEG_new_rwops, or SMPEG_new_data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
icculus smpeg 0 ~ 2.0.0 -

II. Public POCs for CVE-2026-112009

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112009

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-112009 (1)

Security Blog Posts for CVE-2026-112009 (1)

Vendor Pages for CVE-2026-112009 (1)

IV. Related Vulnerabilities

Same product: smpeg
Same vendor: icculus
Same weakness: CWE-125

V. Comments for CVE-2026-112009

No comments yet

Leave a comment