CVE-2026-108577: Konstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord resource consumption
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abcaddgchord of the file src/loadabc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using Konstanty Bialkowski libmodplug versions up to 0.8.9.1 are affected when the ABC Music Format Parser processes attacker-controlled content.
What does an attacker need to exploit this issue?
The attack can be initiated remotely and requires user interaction. The supplied severity vector indicates no privileges are required and that exploitation has low complexity.
What is the expected impact?
Successful exploitation causes resource consumption, with availability impact rated low. The supplied assessment indicates no confidentiality or integrity impact.