EUVD-2026-92276

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105249

A use after free vulnerability exists in vgmstream up to version r2117 . The flaw is located within the TXTP File Handler component, specifically impacting the make_group_random function in the file src/meta/txtp_process.c . This issue can be triggered via a local attack . To remediate this vulne...