CVE-2026-95121

Deferred Deferred - Pending Action

Arbitrary Code Execution in mp4v2 via MP4RtpAtom::ReadHntiType

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: MITRE

Description

An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-13

EPSS Evaluated

2026-10-18

NVD

CVE-2026-95121

EUVD

EUVD-2026-98805

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability is in the mp4v2 library version 2.0.0. It involves a flaw in the MP4RtpAtom::ReadHntiType() function located in src/atom_rtp.cpp. An attacker can exploit this by crafting a malicious MP4 file that causes an undersized RTP atom to trigger a near-2^64 allocation size through an unchecked offset subtraction. This can lead to arbitrary code execution.

Detection Guidance

To detect this vulnerability, monitor for crashes or memory allocation errors when processing MP4 files using the mp4v2 library. Use AddressSanitizer (ASan) to detect excessive memory allocations or integer underflows during file parsing. Check for system resource exhaustion when handling MP4 files with undersized RTP/SDP atoms.

Impact Analysis

If you use the mp4v2 library version 2.0.0, an attacker could exploit this vulnerability by tricking you into processing a specially crafted MP4 file. This could allow the attacker to execute arbitrary code on your system, potentially leading to data theft, system compromise, or further network attacks.

Compliance Impact

This vulnerability primarily causes denial-of-service or memory exhaustion by triggering excessive memory allocation through an integer underflow. It does not directly involve data exposure or unauthorized access, which are key concerns for GDPR or HIPAA compliance. However, if exploited in a system processing sensitive data (e.g., medical or personal records), it could lead to service disruption, potentially violating availability requirements under these regulations.

Mitigation Strategies

Update mp4v2 to the latest version to address the arbitrary code execution vulnerability in MP4RtpAtom::ReadHntiType. Avoid processing untrusted MP4 files until patched.

Hi! I’m here to help you understand CVE-2026-95121. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70