CVE-2026-36912
the affected product
A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
- CVSS
- 7.5
- EPSS
- 0.34% 27.0% percentile
- CISA KEV
- Not listed
- Published
- 2026.07.02