icculus

Products

ProductCVEsExploitedLatest
smpeg2–Oct 18, 2026
PhysicsFS1–Oct 14, 2026

Exploited and recent CVEs

  • CVE-2026-112010 Medium 5.5 smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp 0.1%
  • CVE-2026-112009 Medium 5.5 smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer 0.1%
  • CVE-2024-58392 Low 3.3 PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint 0.2%