CVE-2026-104679
CVE-2026-104679
This page contains facts from public vulnerability sources. Check the original advisory before updating.
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is installed or resulting in a denial-of-service (DoS) condition.
CVSS 6.9 · Medium · EPSS 0.1%
- Published
- Updated
Affected products and versions
vocaloid6 editor
- Versions
- ≥ 0, ≤ 6.13.2: Affected (semver)
No fix published