p PatchFirst

CVE-2026-108577

CVE-2026-108577 · Konstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord resource consumption

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 5.3 · Medium · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • libmodplug

    Versions
    • 0.8.9.0: Affected
    • 0.8.9.1: Affected

    No fix published

  • libmodplug Debian:12

    Versions
    • 1:0.8.9.0-3
    • 1:0.8.9.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Debian:13

    Versions
    • 1:0.8.9.0-3
    • 1:0.8.9.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Debian:14

    Versions
    • 1:0.8.9.0-3
    • 1:0.8.9.0-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:14.04:LTS

    Versions
    • 1:0.8.8.4-4
    • 1:0.8.8.4-4.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:16.04:LTS

    Versions
    • 1:0.8.8.5-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:18.04:LTS

    Versions
    • 1:0.8.9.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:20.04:LTS

    Versions
    • 1:0.8.9.0-2
    • 1:0.8.9.0-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:22.04:LTS

    Versions
    • 1:0.8.9.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:24.04:LTS

    Versions
    • 1:0.8.9.0-3
    • 1:0.8.9.0-3build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:26.10

    Versions
    • 1:0.8.9.0-3build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • libmodplug Ubuntu:26.04:LTS

    Versions
    • 1:0.8.9.0-3build1
    • 1:0.8.9.0-3build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →