Skip to main content

tsMuxer CVE-2026-7739

| EUVD-2026-26922 LOW
Improper Resource Shutdown or Release (CWE-404)
2026-05-04 VulDB
1.9
CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

6
PoC Detected
May 04, 2026 - 15:17 vuln.today
Public exploit code
Analysis Generated
May 04, 2026 - 07:31 vuln.today
CVSS changed
May 04, 2026 - 07:22 NVD
3.3 (LOW) 1.9 (LOW)
EUVD ID Assigned
May 04, 2026 - 07:00 euvd
EUVD-2026-26922
Analysis Generated
May 04, 2026 - 07:00 vuln.today
CVE Published
May 04, 2026 - 06:15 nvd
LOW 1.9

DescriptionNVD

A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxer_prev/tsMuxer/hevc.cpp. This manipulation of the argument track_id causes denial of service. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Denial of service in tsMuxer up to version 2.7.0 via improper input validation in the HevcVpsUnit::setFPS function allows local authenticated attackers to crash the application by manipulating the track_id argument. The vulnerability affects only unsupported product versions and carries a very low CVSS score (1.9), though publicly available exploit code exists.

Sign in for full analysis, threat intelligence, and remediation guidance.

Share

CVE-2026-7739 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy