MEDIUMVulnerability
CVE-2026-86514
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 4669d37a6af94866f6f0628678f9f90d46954e8b. To fix this issue, it is recommended to deploy a patch.
Properties
- severity
- MEDIUM
- score
- 6.3
- cve_id
- CVE-2026-86514
- signal_observed_at
- 2026-09-16T21:37:07+00:00
- vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- published_at
- 2026-09-08T03:17:19.790
- last_modified
- 2026-09-11T21:17:46.627
Related Entities (3)
HAS_WEAKNESS (2)
→[Weakness]Improper Restriction of Operations within the Bounds of a Memory Buffer
→[Weakness]Stack-based Buffer Overflow
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph