See how smpeg compares to other vendors in security performance
smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader() in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable assertion or out-of-bounds copy, crashing the application.
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashes applications opening it through SMPEGnew, SMPEGnewrwops, or SMPEGnewdata.