CVE-2026-108577

EUVD-2026-96926
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 20.24%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
konstanty_bialkowskilibmodplug
0.8.9.0
CNA
konstanty_bialkowskilibmodplug
0.8.9.1
CNA
Debian logo
Debian Releases
Debian Product
Codename
libmodplug
bookworm
undetermined
forky
undetermined
sid
undetermined
trixie
undetermined
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libmodplug
bionic
dne
focal
dne
jammy
needs-triage
noble
needs-triage
resolute
needs-triage
trusty
dne
xenial
dne