CVE-2026-92880

An out-of-bounds write vulnerability exists in vgmstream (versions up to r2117), specifically in the function vadpcm_read_coefs_be within the file src/coding/vadpcm_decoder.c, part of the EA SCHl parser component. The flaw is triggered by manipulation of the entry/entries argument, allowing a rem...

EUVD-2026-81677

A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcmreadcoefsbe of the file src/coding/vadpcmdecoder.c of the component EA SCHl parser. This manipulation of the argument entry/entries causes out-of-bounds write. Remote exploitation of the attack is possible...