CVE-2026-105248 in vgmstream
Prediction
by VulDB Data Team • 10/04/2026
A security flaw has been discovered in <a href="/product/vgmstream">vgmstream up to r2117</a>. This affects the function <code>parse_params/txtp_parse</code> of the file <em>src/meta/txtp_parser.c</em> of the component <em>TXTP File Handler</em>. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as <em>4669d37a6af94866f6f0628678f9f90d46954e8b</em>. It is best practice to apply a patch to resolve this issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.