Medium severity6.3NVD Advisory· Published Oct 5, 2026

CVE-2026-105251

Description

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named 4b8316652a30d40f99ad43310bed273fd1f8a7a3. It is suggested to install a patch to address this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vgmstream/Vgmstreamllm-fuzzy
Range: <=r2117

Patches

Vulnerability mechanics

References

github.com/vgmstream/vgmstream/commit/4b8316652a30d40f99ad43310bed273fd1f8a7a3nvd
github.com/vgmstream/vgmstream/issues/2000nvd
github.com/vgmstream/vgmstream/pull/2001nvd
vuldb.com/cve/CVE-2026-105251nvd
vuldb.com/submit/976281nvd
vuldb.com/vuln/413458nvd
vuldb.com/vuln/413458/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000