CVE-2026-15274 PUBLISHED

lo48576 fbxcel Node Header parser.rs denial of service

Assigner: VulDB
Reserved: 09.07.2026 Published: 09.07.2026 Updated: 10.07.2026

A vulnerability was detected in lo48576 fbxcel up to 0.9.0. This affects an unknown part of the file src/pull_parser/v7400/parser.rs of the component Node Header Handler. The manipulation results in denial of service. The attack must be initiated from a local position. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 4.8

Product Status

Vendor lo48576
Product fbxcel
Versions
  • Version 0.1 is affected
  • Version 0.2 is affected
  • Version 0.3 is affected
  • Version 0.4 is affected
  • Version 0.5 is affected
  • Version 0.6 is affected
  • Version 0.7 is affected
  • Version 0.8 is affected
  • Version 0.9.0 is affected

Credits

  • Zyz3366 (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Denial of Service CWE