CVE-2026-92879

Published: Set 17, 2026 Last Modified: Set 17, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,3
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 4,3
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: low
MEDIUM 5,0
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: none
Integrity: none
Availability: partial

Description

AI Translation Available

A security flaw has been discovered in vgmstream up to r2117. This issue affects the function parse_mus of the file src/meta/mus_acm.c. The manipulation results in resource consumption. The attack may be launched remotely. The patch is identified as ae37662ad626254ddd96ad69ac263792d7a92024. Applying a patch is advised to resolve this issue.

400

Uncontrolled Resource Consumption

Draft
Common Consequences
Security Scopes Affected:
Availability Access Control Other
Potential Impacts:
Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Dos: Resource Consumption (Other) Bypass Protection Mechanism Other
Applicable Platforms
Technologies: Not Technology-Specific, AI/ML
View CWE Details
404

Improper Resource Shutdown or Release

Draft
Common Consequences
Security Scopes Affected:
Availability Other Confidentiality
Potential Impacts:
Dos: Resource Consumption (Other) Varies By Context Read Application Data
Applicable Platforms
All platforms may be affected
View CWE Details
https://github.com/vgmstream/vgmstream/
https://github.com/vgmstream/vgmstream/commit/ae37662ad626254ddd96ad69ac263792d…
https://github.com/vgmstream/vgmstream/issues/1993
https://github.com/vgmstream/vgmstream/pull/2008
https://vuldb.com/cve/CVE-2026-92879
https://vuldb.com/submit/942160
https://vuldb.com/vuln/406345
https://vuldb.com/vuln/406345/cti