5.3
Medium
CVE-2026-92880 A weakness has been identified in vgmstream up to r2117
Description
A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcm_read_coefs_be of the file src/coding/vadpcm_decoder.c of the component EA SCHl parser. This manipulation of the argument entry/entries causes out-of-bounds write. Remote exploitation of the attack is possible. Patch name: ae37662ad626254ddd96ad69ac263792d7a92024. It is suggested to install a patch to address this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| vgmstream | Versions not published |
Other CVEs of vgmstream
The 9 CVEs of vgmstream →
CVE-2026-105251
A vulnerability was detected in vgmstream up to r2117
5.3
Medium
CVE-2026-105250
A security vulnerability has been detected in vgmstream up to r2117
5.3
Medium
CVE-2026-105249
A weakness has been identified in vgmstream up to r2117
2.4
Low
CVE-2026-105248
A security flaw has been discovered in vgmstream up to r2117
5.3
Medium