Threat Investigation
Request a demo

CVE-2026-36911

Medium

Description

A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

SeverityMedium
CVSS5.5
Exploit probability—
ProductMPC-BE
PublishedJul 1, 2026
First seenJul 1, 2026
Weakness typeCWE-369CWE-369

How to fix

Update
  • Aleksoid1978 MPC-BEcommit 4341cb3 or later

Affected products

ProductAffected versionsFixed in
Aleksoid1978 MPC-BENo range specifiedcommit 4341cb3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.