{"id":"CVE-2026-70343","published":"2026-10-13T19:19:50.533","lastModified":"2026-10-13T21:18:18.783","description":"Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70343","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows remote attackers to execute arbitrary code when processing specially crafted video content over a network. This vulnerability arises from insufficient bounds checking in memory allocation for video data handling.","exploitability":"Exploitation requires a remote attacker to deliver malicious MPEG-2 video content to a vulnerable system, with minimal preconditions beyond network accessibility and the presence of the affected extension.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on affected systems with the privileges of the user running the video processing application, potentially leading to full system compromise.","remediation":"Apply Microsoft's security update KB5042378 which addresses this heap-based buffer overflow in MPEG-2 Video Extension.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","media","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:57:23.624Z"}}