Security Advisory
CVE-2026-36909
6.2
MEDIUM
Vulnerability Description
A NULL pointer dereference in the AP4_TkhdAtom::GetTrackId() function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
Published Date
July 1, 2026
Official Source
NIST NVD Advisory