Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: icculus Clear all filters
TI-2026-76162 CVE-2026-112010 · GHSA-xc26-7mh2-w5rr

Integer underflow in smpeg MPEG parser can crash applications

Priority LOW 29

smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00128 Published 2026-10-18 No fix listed CWE-191
TI-2026-76161 CVE-2026-112009 · GHSA-hhc9-vxgx-6xvc

Heap out-of-bounds read in smpeg MPEG stream parsing

Priority MEDIUM 63

smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00128 Published 2026-10-18 No fix listed CWE-125
TI-2024-39136 CVE-2024-58392 · GHSA-f7r8-2vph-g5gv

Out-of-bounds read in PhysicsFS UTF-8 codepoint handling

Priority LOW 21

PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00168 Published 2026-10-14 No fix listed CWE-125