vgmstream CVE-2026-105251

Exploitation requires a victim to open or play an attacker-crafted PlayStation VAG file through an application that uses vgmstream (version up to r2117); the ps_find_padding function in src/coding/psx_decoder.c reads beyond the input buffer when the remaining bytes are fewer than a full ADPCM frame (the patch adds a 'bytes < frame_size' bounds check). Limiting factors: exploitation is passive-interaction dependent (UI:P) - it does not occur without the user loading the malicious file - and impact is confined to minor memory disclosure or a decoder crash rather than code execution or system compromise; no authentication is required per the PR:N metric.

This is a genuinely moderate-to-low priority issue, not a top-tier threat. The signals are largely consistent: the input CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:P) scores 5.3 (MEDIUM), reflecting that exploitation is network-reachable but depends on user interaction (a victim must open or play a crafted file). CWE-125 (out-of-bounds read) plus the Information Disclosure tag indicate the primary impact is limited memory disclosure and/or a decoder crash, not code execution - consistent with the low VC/VI/VA (all L) and no scope change (SC/SI/SA:N). There is no CISA KEV listing and no public exploit was identified in the provided data, so the exploitation signal is weak. The exploitation-maturity metric is E:X (not defined), meaning maturity is explicitly unspecified rather than confirmed. One caveat to verify: the record labels the attack 'remote' and uses AV:N, but as a file-parsing library the realistic vector is a maliciously crafted VAG file delivered to and opened by a victim - 'remote' here means attacker-supplied input, not direct network service exploitation. The input provides only a CVSS 4.0 vector and no 3.1 vector; impact ratings of VI:L (integrity) are questionable for a pure read primitive. Overall: a real but low-urgency defect, appropriately patched.

An attacker crafts a malformed PlayStation VAG audio file in which the padding-detection logic in ps_find_padding encounters insufficient remaining data for a full frame. When a victim opens or plays this file in an application that embeds vgmstream (e.g., a media-player plugin), the decoder reads past the end of the input buffer, disclosing adjacent process memory or crashing the application. No public exploit code was identified at time of analysis, and successful exploitation requires the victim to load the attacker-supplied file (UI:P).