81 matches found
CVE-2026-110660
A flaw was found in vgmstream. An attacker can cause a Denial of Service DoS by tricking a user or application into processing a specially crafted audio file. Due to missing boundary checks within the G.722.1 audio decoder, reading malformed input causes an out-of-bounds read on the stack during...
CVE-2026-110660
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
CVE-2026-110660
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
CVE-2026-110660
The software vgmstream through r2117 contains a stack out-of-bounds read vulnerability within the G.722.1/Siren14 decoder (specifically in g7221_lib.c). The root cause is that the bit reader refills without verifying the data_u32 array end. An attacker can provide specially crafted .s14 or .sss f...
CVE-2026-110660 vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decoder
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
CVE-2026-110660 vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decoder
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
CVE-2026-110660 vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decoder
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
EUVD-2026-101133
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
PT-2026-114100
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221 lib.c, whose bit reader refills without checking the data u32 array end. Attackers can supply crafted .s14 or .sss files that drive decode vector quantized mlt indices past the stack...
CVE-2026-110660: Out-of-bounds Read
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
CVE-2026-105251
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...
CVE-2026-105248
A security flaw has been discovered in vgmstream up to r2117. This affects the function parseparams/txtpparse of the file src/meta/txtpparser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as...
CVE-2026-105249
A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...
CVE-2026-105251
The vgmstream software, specifically versions up to r2117 , contains an out-of-bounds read vulnerability in the VAG File Handler component. The issue originates from the ps_find_padding function within the src/coding/psx_decoder.c file. An attacker can trigger this vulnerability remotely through ...
CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...
CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...
CVE-2026-105251 vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...
EUVD-2026-92283
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function psfindpadding of the file src/coding/psxdecoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. Th...
CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...
CVE-2026-105250
A security vulnerability exists in vgmstream up to version r2117 . The flaw is located in the Microsoft IMA Decoder component, specifically within the decode_ms_ima function of the file src/coding/ima_decoder.c . This issue is caused by a divide by zero error, which can be triggered remotely. Det...