VYPR

libvgm

by ValleyBell

CVEs (1)

  • CVE-2026-111150MedOct 15, 2026
    risk 0.36cvss 5.5epss —

    ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values,…