CVE-2026-120386: Medium severity Effekseer Effekseer vulnerability
Published Nov 9, 2026
·Updated
Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash.
Affected Software
1 affected component
Effekseer Effekseer
Event History
Nov 9, 2026
CVE Published
via MITRE·07:44 AM
Data Sourced
via MITRE·07:44 AM
DescriptionSeverity
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Event
via NVD·08:17 AM
Frequently Asked Questions
1
What must an attacker do to trigger the issue?
An attacker must cause a crafted effect file to be loaded by an affected Effekseer runtime. The supplied vector indicates user interaction is required.
2
What is the expected impact if exploitation succeeds?
The host process may crash, resulting in an availability impact. The provided severity vector indicates no confidentiality or integrity impact.