CVE-2026-86515

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-86515

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86515.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-86515

Published

2026-09-08T03:00:12Z

Modified

2026-09-09T03:48:17Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

vgmstream txtp txtp_parser.c add_entry resource consumption

Details

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/meta/txtp_parser.c of the component txtp. Such manipulation of the argument range_start/range_end leads to resource consumption. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The name of the patch is 4b6a02dd1aff6428255db912563d77d4cb0a143e. It is advisable to implement a patch to correct this issue.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-400",
        "CWE-404"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86515.json"
}

References

Affected packages

Git / github.com/vgmstream/vgmstream

Affected ranges

Type

GIT

Repo

https://github.com/vgmstream/vgmstream

Events

Introduced

71e2361042531fe767fb98300cf8c1ee95e539a0

Fixed

4b6a02dd1aff6428255db912563d77d4cb0a143e

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "r2117"
        },
        {
            "last_affected": "r2117"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

Other

r2117

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-86515.json"