CVE-2026-86515

vgmstream up to r2117 is affected by a vulnerability in the txtp parser component, specifically the add_entry function in src/meta/txtp_parser.c. Manipulation of the range_start/range_end arguments leads to resource consumption , resulting in a low availability impact. The attack is remote over t...

CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...