CVE-2026-105251

Katalog CVE

CVSS 6.3 · Medium EPSS 0,25%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer. Skor CVSS 3.1 6.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named 4b8316652a30d40f99ad43310bed273fd1f8a7a3. It is suggested to install a patch to address this issue.

Rincian

Terbit di NVD

5 Oktober 2026

Terakhir diubah

6 Oktober 2026

Status NVD

Deferred

CVSS 3.1

6.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,8% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/vgmstream/vgmstream/
• https://github.com/vgmstream/vgmstream/commit/4b8316652a30d40f99ad43310bed273fd1f8a7a3
• https://github.com/vgmstream/vgmstream/issues/2000
• https://github.com/vgmstream/vgmstream/pull/2001
• https://vuldb.com/cve/CVE-2026-105251
• https://vuldb.com/submit/976281
• https://vuldb.com/vuln/413458
• https://vuldb.com/vuln/413458/cti