CVE-2026-105248

A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the file src/meta/txtp_parser.c of the component TXTP File Handler. The manipulation results in out-of-bounds write. The attack may be launched remotely. The patch is identified as 4669d37a6af94866f6f0628678f9f90d46954e8b. It is best practice to apply a patch to resolve this issue.

• CWE-119
• CWE-787

• https://github.com/vgmstream/vgmstream/
• https://github.com/vgmstream/vgmstream/commit/4669d37a6af94866f6f0628678f9f90d46954e8b
• https://github.com/vgmstream/vgmstream/issues/1997
• https://vuldb.com/cve/CVE-2026-105248
• https://vuldb.com/submit/976278
• https://vuldb.com/vuln/413455
• https://vuldb.com/vuln/413455/cti

Published

Oct 5, 2026

Last Modified

Oct 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-105237A vulnerability was detected in linlinjava litemall up to 1.…3.7
• CVE-2026-105238A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.…7.3
• CVE-2026-10524The CoCart WordPress plugin before 4.9.0 does not validate a…7.5
• CVE-2026-105245A vulnerability has been found in sgl-project sglang up to 0…3.7
• CVE-2026-105246A vulnerability was found in SourceCodester Online Reviewer …7.3
• CVE-2026-105247A vulnerability was determined in SourceCodester Online Revi…7.3
• CVE-2026-105249A weakness has been identified in vgmstream up to r2117. Thi…4.8
• CVE-2026-10525The NEX-Forms WordPress plugin before 9.2.3 does not saniti…6.1
• CVE-2026-105250A security vulnerability has been detected in vgmstream up t…4.3
• CVE-2026-105251A vulnerability was detected in vgmstream up to r2117. Affec…6.3
• CVE-2026-105253A vulnerability was determined in itsourcecode Online Admiss…7.3
• CVE-2026-105254A vulnerability was identified in itsourcecode Online Admiss…6.3