CVE-2026-105251
Received Received - Intake

Out-of-Bounds Read in vgmstream VAG File Handler

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: VulDB

Description
A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG File Handler. Performing a manipulation results in out-of-bounds read. The attack is possible to be carried out remotely. The patch is named 4b8316652a30d40f99ad43310bed273fd1f8a7a3. It is suggested to install a patch to address this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-05
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-105251
EUVD
EUVD-2026-92283

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vgmstream vgmstream to r2117 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack buffer underflow in the vgmstream library affecting the ps_find_padding function in src/coding/psx_decoder.c. It occurs when processing VAG files with short reads, causing the buffer position to become negative and leading to out-of-bounds memory access. The issue arises during reverse-scan logic when fewer than one full frame is read, triggering incorrect buffer handling.

Detection Guidance

This vulnerability is specific to the vgmstream library and affects the ps_find_padding function in the psx_decoder.c file. Detection requires checking the version of vgmstream in use. If you are using a version up to r2117, the system is vulnerable. Use commands like 'vgmstream-info --version' or check the library version in your media player or audio processing software.

Impact Analysis

This vulnerability can cause crashes or denial-of-service when processing malicious VAG files. It may also allow reading adjacent stack memory, potentially exposing sensitive data. The impact depends on how vgmstream is used in applications, but primarily risks instability or information leakage.

Mitigation Strategies
  • Update vgmstream to the patched version (commit 4b8316652a30d40f99ad43310bed273fd1f8a7a3) or later to address the stack buffer underflow issue.
  • If updating is not immediately possible, avoid processing untrusted VAG files with vulnerable versions of vgmstream to prevent potential crashes or memory corruption.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105251. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart