PT-2026-114100 · Vgmstream · Vgmstream
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221 lib.c, whose bit reader refills without checking the data u32 array end. Attackers can supply crafted .s14 or .sss files that drive decode vector quantized mlt indices() past the stack buffer during format detection, crashing the application.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Vgmstream