A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. (CVE-2026-108577)

CVE-2026-108577 identifies a resource consumption vulnerability in the abc_add_gchord function within the src/load_abc.cpp file of the ABC Music Format Parser component in Konstanty Bialkowski libmodplug versions up to 0.8.9.1. The vulnerability allows remote attackers to cause resource exhaustion, potentially leading to denial of service. The vendor was contacted but did not provide any response or patch. No known exploits are reported in the wild.

The vulnerability allows remote attackers to cause resource consumption, which may degrade or disrupt service availability. There is no impact on confidentiality or integrity. The overall severity is low due to the limited scope of impact and the requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should monitor for updates from the vendor or community. Until a fix is released, consider limiting exposure of the vulnerable component to untrusted inputs or networks.