CVE-2026-112010— smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp
Quick assessment
Affected
icculus smpeg
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SMPEG 2.0.0 及更早版本在 文件的 函数中存在整数下溢漏洞。攻击者可通过声明一个过小的数据包长度，使 发生回绕。攻击者可构造恶意 MPEG 文件，并通过 、 或 函数打开该文件，从而触发可被利用的断言失败或越界复制，导致应用程序崩溃。
Possible ATT&CK Techniques 1 AI
T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112010
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp
Source: CVE Program / CVE List V5
Vulnerability Description
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reachable assertion or out-of-bounds copy, crashing the application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-112010
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112010
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-112010 (1)
Security Blog Posts for CVE-2026-112010 (1)
-
🔗 smpeg: Heap Out-of-Bounds Read in MPEG System Header Stream Table Parsing - HackMD Read full article technical-description exploit
Vendor Pages for CVE-2026-112010 (1)
IV. Related Vulnerabilities
Same weakness: CWE-191
-
CVE-2026-111881
FreeRDP 3.14.1 before 3.32.0 Integer Underflow in BMP Writer -
CVE-2026-48503
libIEC61850: Remote information disclosure in MMS file servi -
CVE-2026-73252
Mongoose: Unauthenticated remote heap out-of-bounds read in -
CVE-2026-86566
Dpdk: dpdk: guest with runt rx descriptors underflows copy l -
CVE-2026-75083
Integer underflow of the radio-reported frame length causes
V. Comments for CVE-2026-112010
No comments yet