Threat Investigation
Request a demo

CVE-2026-36912

High

Description

A NULL pointer dereference in the AP4_AtomSampleTable::GetSample() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

SeverityHigh
CVSS7.5
Exploit probability—
ProductMPC-BE
PublishedJul 1, 2026
First seenJul 1, 2026
Weakness typeCWE-476NULL pointer dereference

How to fix

Update
  • Aleksoid1978 MPC-BEcommit 4341cb3 or later

Affected products

ProductAffected versionsFixed in
Aleksoid1978 MPC-BENo range specifiedcommit 4341cb3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.