Description
A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applying a patch is advised to resolve this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | vgmstream | r2117 | — |
References
- VDB-406345 | vgmstream mus_acm.c parse_mus resource consumption vdb-entry technical-description
- VDB-406345 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-92879 | CVE Analysis and Report third-party-advisory
- Submit #942160 | vgmstream r2117 Resource Consumption third-party-advisory
- https://github.com/vgmstream/vgmstream/issues/1993 issue-tracking
- https://github.com/vgmstream/vgmstream/pull/2008 issue-tracking patch
- https://github.com/vgmstream/vgmstream/commit/ae37662ad626254ddd96ad69ac263792d7a92024 patch
- https://github.com/vgmstream/vgmstream/ product