JVN#56286875
Effekseer improperly validates input data

Overview

Effekseer, particle effect editing tool, improperly validates input data, which may cause out-of-bounds read.

Products Affected

• Effekseer versions 1.80.7 and earlier

Description

Effekseer consists of a particle effect editing tool and a runtime to play back the effects. Effekseer runtime is expected to be embedded in the applications such as games and 3D CG viewers.
Effekseer improperly validates input data ("effect file"), which may cause out-of-bounds read.

• Improper handling of structural elements (CWE-237)
  • CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N Base Score 5.1
  • CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Base Score 4.3
  • CVE-2026-120386

Impact

When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.
The developer has released the following version to address this vulnerability:

• Effekseer 1.80.8