Heap Out-of-Bounds Read in SMPEG by Icculus
CVE-2026-112009
6.8MEDIUM
What is CVE-2026-112009?
The SMPEG library, up to version 2.0.0, is vulnerable to a heap out-of-bounds read due to improper handling of system header stream tables in the MPEGsystem::FillBuffer() function. By crafting a specific MPEG file where the stream table bytes have the high bit set, attackers can exploit this vulnerability to read beyond the permissible buffer size of 16384 bytes. This flaw may lead to application crashes when files are processed through the SMPEG_new, SMPEG_new_rwops, or SMPEG_new_data functions, compromising application stability and potentially revealing sensitive data.
Affected Version(s)
smpeg 0 <= 2.0.0
References
CVSS V4
Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology