PT-2026-54756 · Aleksoid1978 · Mpc-Be

Sodium49 · Published 2026-07-01 · Updated 2026-07-01 · CVE-2026-36911

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Aleksoid1978 MPC-BE versions prior to commit 4341cb3

Description A division-by-zero issue exists in the CStreamSwitcherOutputPin::DecideBufferSize() function. An attacker can trigger a Denial of Service (DoS) by providing a specially crafted MP4 file.

Recommendations Update Aleksoid1978 MPC-BE to commit 4341cb3 or a later version.

Exploit

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-36911

Affected Products

Mpc-Be

References · 3

• 🔥 https://github.com/Aleksoid1978/MPC-BE/issues/1062 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-36911 · Security Note
• https://t.me/cveNotify/184172 · Telegram Post