CVE-2026-95121: Mp4v2 mp4v2 vulnerability
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atomrtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an unchecked offset subtraction
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
An attacker needs to cause the vulnerable mp4v2 2.0.0 code to process a specially crafted MP4 file containing an undersized RTP atom. Exploitation occurs through MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp.
What is the underlying failure condition?
An unchecked offset subtraction can underflow when an RTP atom is undersized, producing a near-2^64 allocation size. This condition can lead to arbitrary code execution.
How can I determine whether my environment is affected?
Systems using mp4v2 version 2.0.0 are affected when they process attacker-controlled or otherwise untrusted MP4 files. Review applications and services that invoke mp4v2 parsing functionality, particularly paths that reach MP4RtpAtom::ReadHntiType().