CVE-2026-92879: falha de média gravidade em vgmstream
vgmstream mus_acm.c parse_mus resource consumption
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.6%
A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applying a patch is advised to resolve this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
Produtos afetados
n/a · vgmstreamReferências
https://github.com/vgmstream/vgmstream/https://github.com/vgmstream/vgmstream/commit/ae37662ad626254ddd96ad69ac263792d7a92024https://github.com/vgmstream/vgmstream/issues/1993https://github.com/vgmstream/vgmstream/pull/2008https://vuldb.com/cve/CVE-2026-92879https://vuldb.com/submit/942160https://vuldb.com/vuln/406345https://vuldb.com/vuln/406345/cti