CVE-2026-7739

EUVD-2026-26922
A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxer_prev/tsMuxer/hevc.cpp. This manipulation of the argument track_id causes denial of service. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
justdan96tsmuxer
2.0
CNA
justdan96tsmuxer
2.1
CNA
justdan96tsmuxer
2.2
CNA
justdan96tsmuxer
2.3
CNA
justdan96tsmuxer
2.4
CNA
justdan96tsmuxer
2.5
CNA
justdan96tsmuxer
2.6
CNA
justdan96tsmuxer
2.7.0
CNA
Common Weakness Enumeration
References
https://github.com/justdan96/tsMuxer/
https://github.com/justdan96/tsMuxer/issues/895
https://github.com/user-attachments/files/16812270/poc1.zip
https://vuldb.com/submit/807647
https://vuldb.com/vuln/360914
https://vuldb.com/vuln/360914/cti