CVE-2026-7740
justdan96 tsMuxer vvc.cpp setFPS denial of service
- State
- Published
- Severity
- 4.8 Medium
- Published
- May 4, 2026
- Updated
- May 4, 2026
- Reserved
- May 3, 2026
Description
A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of the argument track_id leads to denial of service. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 3.3 Low | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 1.7 Low | AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-404 Denial of Service
Affected Products
| Product | Versions |
|---|---|
tsMuxerjustdan96 |
|
References
- VDB-360915 | justdan96 tsMuxer vvc.cpp setFPS denial of servicevdb-entrytechnical-description
- VDB-360915 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #807651 | tsMuxer git-7f8667d crashthird-party-advisory
- https://github.com/justdan96/tsMuxer/issues/899issue-tracking
- https://github.com/user-attachments/files/16812319/poc5.zipexploit
- https://github.com/justdan96/tsMuxer/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.