5.3
Medium
CVE-2026-105248 A security flaw has been discovered in vgmstream up to r2117
Description
A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the file src/meta/txtp_parser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as 4669d37a6af94866f6f0628678f9f90d46954e8b. It is best practice to apply a patch to resolve this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vgmstream | Versions not published |
Other CVEs of vgmstream
The 9 CVEs of vgmstream →
CVE-2026-105251
A vulnerability was detected in vgmstream up to r2117
5.3
Medium
CVE-2026-105250
A security vulnerability has been detected in vgmstream up to r2117
5.3
Medium
CVE-2026-105249
A weakness has been identified in vgmstream up to r2117
2.4
Low
CVE-2026-92881
A security vulnerability has been detected in vgmstream
5.3
Medium