What’s Vulnerable › Products

vgmstream vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your vgmstream version is affected

Latest vgmstream vulnerabilities

• CVE-2026-105251 — vgmstream VAG File psx_decoder.c ps_find_padding out-of-bounds (CVSS 6.3)
• CVE-2026-105250 — vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero (CVSS 4.3)
• CVE-2026-105249 — vgmstream TXTP File txtp_process.c make_group_random use after free (CVSS 4.8)
• CVE-2026-105248 — vgmstream TXTP File txtp_parser.c txtp_parse out-of-bounds write (CVSS 6.3)
• CVE-2026-92881 — vgmstream AWB parser awb.c init_vgmstream_awb_memory divide by zero (CVSS 4.3)
• CVE-2026-92880 — vgmstream EA SCHl parser vadpcm_decoder.c vadpcm_read_coefs_be out-of-bounds write (CVSS 6.3)
• CVE-2026-92879 — vgmstream mus_acm.c parse_mus resource consumption (CVSS 4.3)
• CVE-2026-86515 — vgmstream txtp txtp_parser.c add_entry resource consumption (CVSS 4.3)
• CVE-2026-86514 — vgmstream txth-txtp txth.c sscanf stack-based overflow (CVSS 6.3)