Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Effekseer",
          "vendor": "Effekseer",
          "versions": [
            {
              "lessThanOrEqual": "1.80.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Effekseer improperly validates \"effect\" files. When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-237",
              "description": "Improper handling of structural elements",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-09T07:44:40.532Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://github.com/effekseer/Effekseer/releases/tag/1808"
        },
        {
          "url": "https://github.com/effekseer/Effekseer/commit/6cf1cb853383765153219ba5ce9b47eff5ad8398"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN56286875/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2026-120386",
    "datePublished": "2026-11-09T07:44:40.532Z",
    "dateReserved": "2026-11-02T06:51:45.477Z",
    "dateUpdated": "2026-11-09T07:44:40.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000168.html",
  "dc:date": "2026-11-09T13:50+09:00",
  "dcterms:issued": "2026-11-09T13:50+09:00",
  "dcterms:modified": "2026-11-09T13:50+09:00",
  "description": "Effekseer consists of a particle effect editing tool and a runtime to play back the effects. Effekseer runtime is expected to be embedded in the applications such as games and 3D CG viewers.\r\nEffekseer improperly validates input data (\"effect file\"), which may cause out-of-bounds read.\u003ca href=\u0027https://cwe.mitre.org/data/definitions/237.html\u0027 target=\u0027_blank\u0027\u003e\u003c/a\u003e\u003cul\u003e\u003cli\u003eImproper handling of structural elements (CWE-237) - CVE-2026-120386\u003c/li\u003e\u003c/ul\u003eYukimura Aneha reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-000168.html",
  "sec:cpe": {
    "#text": "cpe:/a:misc:effekseer_effekseer",
    "@product": "Effekseer",
    "@vendor": "Effekseer",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2026-000168",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN56286875/index.html",
      "@id": "JVN#56286875",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2026-120386",
      "@id": "CVE-2026-120386",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Effekseer improperly validates input data"
}