Is CVE-2026-112010 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112010?

CVE-2026-112010 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-112010

Description

smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reachable assertion or out-of-bounds copy, crashing the application.