CVE-2026-7739
LOW EPSS 1.7%
Published May 4, 20262mo ago · Modified Jun 17, 20262w ago
1.9 CVSS 4.0
Published May 4, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago
Description
A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxer_prev/tsMuxer/hevc.cpp. This manipulation of the argument track_id causes denial of service. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
1.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-404
References 6
- github.com https://github.com/justdan96/tsMuxer/
- github.com https://github.com/justdan96/tsMuxer/issues/895
- github.com https://github.com/user-attachments/files/16812270/poc1.zip
- vuldb.com https://vuldb.com/submit/807647
- vuldb.com https://vuldb.com/vuln/360914
- vuldb.com https://vuldb.com/vuln/360914/cti
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.