MEDIUM 5.3 NVD
CVE-2026-92879
A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results
A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applying a patch is advised to resolve this issue.
References
- https://github.com/vgmstream/vgmstream/
- https://github.com/vgmstream/vgmstream/commit/ae37662ad626254ddd96ad69ac263792d7a92024
- https://github.com/vgmstream/vgmstream/issues/1993
- https://github.com/vgmstream/vgmstream/pull/2008
- https://vuldb.com/cve/CVE-2026-92879
This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-17 via NVD.
vulnfeed aggregates 12865 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.