Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-105251— vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

Quick assessment

Affected

n/a vgmstream

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 vgmstream（最高至 r2117 版本）中检测到一处漏洞。受此漏洞影响的组件为 VAG 文件处理器（VAG File Handler），具体涉及源文件中的函数。通过构造恶意操作可导致越界读取（out-of-bounds read）。该漏洞允许远程攻击者利用。修复补丁的版本标识为。建议安装该补丁以解决此安全问题。

CVSS 6.3 · Medium Updated Oct 05, 2026

Possible ATT&CK Techniques 3 AI

T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client Execution T1204 · User Execution

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named 4b8316652a30d40f99ad43310bed273fd1f8a7a3. It is suggested to install a patch to address this issue.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	vgmstream	r2117	`cpe:2.3:a:vgmstream:vgmstream::::::::`

II. Public POCs for CVE-2026-105251

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-105251

请登录查看更多情报信息。

Proof of Concept for CVE-2026-105251 (1)

🔗 GitHub - vgmstream/vgmstream: vgmstream - A library for playback of various streamed audio formats used in video games. · GitHub product

Other References for CVE-2026-105251 (6)

https://github.com/vgmstream/vgmstream/issues/2000 issue-tracking
https://github.com/vgmstream/vgmstream/pull/2001 issue-tracking patch
https://github.com/vgmstream/vgmstream/commit/4b8316652a30d40f99ad43310bed273fd1f8a7a3 patch
https://vuldb.com/cve/CVE-2026-105251 third-party-advisory
https://vuldb.com/vuln/413458/cti signature permissions-required
https://vuldb.com/submit/976281 third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-105251

Same Patch Batch · n/a · 2026-10-05 · 7 CVEs total

CVE-2026-105248	6.3 MEDIUM	vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write
CVE-2026-105180	6.3 MEDIUM	Jeebase UserService info updateUser dynamically-determined object attributes
CVE-2026-105174	5.4 MEDIUM	Gerapy Project Management views.py project_create path traversal
CVE-2026-105249	4.8 MEDIUM	vgmstream TXTP File txtp_process.c make_group_random use after free
CVE-2026-105263	4.7 MEDIUM	Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side requ
CVE-2026-105250	4.3 MEDIUM	vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

IV. Related Vulnerabilities

Same product: vgmstream

Same vendor: n/a

Same weakness: CWE-125

V. Comments for CVE-2026-105251

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-105251— vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds

Quick assessment

Possible ATT&CK Techniques 3 AI

I. Basic Information for CVE-2026-105251

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-105251

III. Intelligence Information for CVE-2026-105251

Proof of Concept for CVE-2026-105251 (1)

Other References for CVE-2026-105251 (6)

Same Patch Batch · n/a · 2026-10-05 · 7 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-105251

Leave a comment