Description
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction
Published: 2026-10-13
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Patch
AI Analysis

Impact

An improperly sized MP4 RTP atom can cause an unchecked offset subtraction to produce an allocation size that approaches 2^64, enabling an attacker to trigger an integer overflow that results in a memory allocation bug. This bug allows the attacker to execute arbitrary code when the vulnerable function processes a specially crafted MP4 file.

Affected Systems

The vulnerable component is the mp4v2 library, specifically version 2.0.0, which parses MP4 files and contains the MP4RtpAtom::ReadHntiType() routine. No other vendor products or versions are explicitly listed as affected in the provided data.

Risk and Exploitability

The CVSS score of 7.8 and an EPSS score of < 1 % indicate a high severity vulnerability that is not listed in the CISA KEV catalog. The threat remains significant due to the ability to execute arbitrary code, although the low EPSS suggests exploitation is presently uncommon.

Generated by OpenCVE AI on October 17, 2026 at 07:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain and install the latest released version of mp4v2 from the project's official repository, ensuring the fix for the vulnerable function is included.
  • If an updated release is not yet available, implement an input validation layer that rejects MP4 files lacking proper RTP atom size headers before parsing.
  • Deploy application whitelisting or sandboxing for any processes that handle MP4 files to contain the impact of an exploit.

Generated by OpenCVE AI on October 17, 2026 at 07:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 08:15:00 +0000

Type Values Removed Values Added
Title Integer Underflow in MP4RtpAtom Leading to Arbitrary Code Execution

Wed, 14 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Techsmith
Techsmith mp4v2
Vendors & Products Techsmith
Techsmith mp4v2

Wed, 14 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-190
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Description An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction
References

Subscriptions

Techsmith Mp4v2
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-14T19:19:28.081Z

Reserved: 2026-09-22T00:00:00.000Z

Link: CVE-2026-95121

cve-icon Vulnrichment

Updated: 2026-10-14T19:19:23.406Z

cve-icon NVD

Status : Deferred

Published: 2026-10-13T15:17:51.553

Modified: 2026-10-16T19:56:15.773

Link: CVE-2026-95121

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T08:00:05Z

Weaknesses
  • CWE-190

    Integer Overflow or Wraparound