2.4
Low
CVE-2026-105249 A weakness has been identified in vgmstream up to r2117
Description
A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/meta/txtp_process.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name: ae37662ad626254ddd96ad69ac263792d7a92024. It is recommended to apply a patch to fix this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vgmstream | Versions not published |
Other CVEs of vgmstream
The 9 CVEs of vgmstream →
CVE-2026-105251
A vulnerability was detected in vgmstream up to r2117
5.3
Medium
CVE-2026-105250
A security vulnerability has been detected in vgmstream up to r2117
5.3
Medium
CVE-2026-105248
A security flaw has been discovered in vgmstream up to r2117
5.3
Medium
CVE-2026-92881
A security vulnerability has been detected in vgmstream
5.3
Medium