CVE-2026-112010
Received Received - Intake

Integer Underflow in SMPEG Leading to Denial of Service

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulnCheck

Description
smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reachable assertion or out-of-bounds copy, crashing the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-112010
EUVD
EUVD-2026-103463

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
icculus smpeg 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-191 The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an integer underflow in the smpeg library through version 2.0.0. It occurs in the stream_header() function in MPEGsystem.cpp where attackers can declare an undersized packet length. This causes packet_size to wrap around, leading to a reachable assertion or out-of-bounds copy when a crafted MPEG file is opened via functions like SMPEG_new, SMPEG_new_rwops, or SMPEG_new_data, resulting in application crashes.

Detection Guidance

To detect this vulnerability, inspect systems using smpeg 2.0.0 or earlier for crashes when processing MPEG files. Check application logs for assertion failures or out-of-bounds errors during MPEG file parsing. No specific network detection commands are provided, but monitoring for application crashes linked to MPEG file handling may indicate exploitation.

Impact Analysis

This vulnerability could allow attackers to crash applications using the smpeg library by supplying a specially crafted MPEG file. This may lead to denial-of-service conditions, disrupting services that rely on the library for media playback or processing.

Compliance Impact

This vulnerability primarily causes application crashes or denial-of-service conditions due to memory corruption. It does not directly expose or leak sensitive data, which is a key concern for GDPR or HIPAA compliance. However, crashes in systems processing media files could disrupt services handling personal or health data, potentially violating availability requirements under these regulations.

Mitigation Strategies

Immediately update smpeg to a version beyond 2.0.0 if available. If updating is not possible, avoid processing untrusted MPEG files. Restrict access to functions like SMPEG_new, SMPEG_new_rwops, and SMPEG_new_data to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112010. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart