CVE-2026-111150

The ValleyBell libvgm library (versions through commit a6eed945 ) contains a heap out-of-bounds read vulnerability within the PCM data-block decompressor. The root cause is an unbounded compression-table index ; specifically, a crafted .vgm file featuring a small type 0x7F table and wider compres...