CVE-2026-120386
Received Received - Intake

Effekseer Effect File Validation Flaw Leads to Crash

Publication date: 2026-11-09

Last updated on: 2026-11-09

Assigner: JPCERT/CC

Description
Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-09
Last Modified
2026-11-09
Generated
2026-11-09
AI Q&A
2026-11-09
EPSS Evaluated
N/A
NVD
CVE-2026-120386
EUVD
EUVD-2026-119872

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Effekseer Effekseer From 0 (inc) to 1.80.7 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-237 The product does not handle or incorrectly handles inputs that are related to complex structures.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-120386 is a vulnerability in Effekseer, a particle effect editing tool. It involves improper input validation of effect files, leading to an out-of-bounds read. When a specially crafted effect file is loaded into the affected runtime, it may cause the host application to crash.

Detection Guidance

Detecting this vulnerability requires checking for outdated Effekseer versions (1.80.7 or earlier) and analyzing effect files for malformed data. Inspect system logs for crashes when loading effect files. Use file integrity checks to identify suspicious effect files. No specific commands are provided in the resources.

Impact Analysis

This vulnerability can cause the host application to crash when a crafted effect file is loaded. This may lead to denial of service, disrupting applications that rely on Effekseer for visual effects.

Mitigation Strategies

Immediately update Effekseer to version 1.80.8 or later to address the vulnerability. Remove or quarantine any untrusted effect files. Monitor applications using Effekseer for crashes or unusual behavior. Apply patches from the official Effekseer repository if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120386. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...