CVE-2026-110660

LOW 3.3

vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 Decoder

CVSS Score

3.3

EPSS Score

0.0%

EPSS Percentile

0th

vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c, whose bit reader refills without checking the data_u32 array end. Attackers can supply crafted .s14 or .sss files that drive decode_vector_quantized_mlt_indices() past the stack buffer during format detection, crashing the application.

CWE	CWE-125
Vendor	vgmstream
Product	vgmstream
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for vgmstream vgmstream

Be the first to know when new low vulnerabilities affecting vgmstream vgmstream are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Affected Versions

vgmstream / vgmstream

0 ≤ r2117

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hackmd.io: https://hackmd.io/@haind-pwn/vgmstream-g7221-bitreader-oob-read github.com: https://github.com/vgmstream/vgmstream/blob/71e2361042531fe767fb98300cf8c1ee95e539a0/src/coding/libs/g7221_lib.c#L838 github.com: https://github.com/vgmstream/vgmstream vulncheck.com: https://www.vulncheck.com/advisories/vgmstream-through-r2117-stack-out-of-bounds-read-via-g-722.1-siren14-decoder

Credits

HaiND from the Post and Telecommunication Institute of Technology