Improper Input Validation in Effekseer Affects Windows and Linux Systems
CVE-2026-120386

5.1MEDIUM

Key Information:

Vendor

Effekseer

Status
Effekseer
Vendor
CVE Published:
9 November 2026

What is CVE-2026-120386?

Effekseer, a popular open-source tool for creating and rendering effects, contains a vulnerability that arises from improper validation of effect files. When an attacker crafts a malicious effect file and loads it into the affected runtime, it may lead to an unexpected crash of the host process. This flaw can potentially disrupt applications that rely on Effekseer for their visual effects, posing risks to software stability and user experience.

Affected Version(s)

Effekseer 0 <= 1.80.7

References

https://github.com/effekseer/Effekseer/releases/tag/1808
https://github.com/effekseer/Effekseer/commit/6cf1cb85338...
https://jvn.jp/en/jp/JVN56286875/

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.