DEBIAN-CVE-2026-108577
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-108577
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-108577.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-108577
- Upstream
- CVE-2026-108577
- Published
- 2026-10-11T13:17:13Z
- Modified
- 2026-10-12T09:00:06Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
- References
Affected packages
Debian:12 / libmodplug
Package
- Name
- libmodplug
- Purl
- pkg:deb/debian/libmodplug?arch=source&distro=bookworm
Debian:13 / libmodplug
Package
- Name
- libmodplug
- Purl
- pkg:deb/debian/libmodplug?arch=source&distro=trixie
Debian:14 / libmodplug
Package
- Name
- libmodplug
- Purl
- pkg:deb/debian/libmodplug?arch=source&distro=forky