CVE-2026-105249 | vgmstream up to r2117 TXTP File src/meta/txtp_process.c make_group_random use after free (Issue 1998)

October 4, 2026 Yanac

A vulnerability was found in vgmstream up to r2117. It has been rated as problematic. This impacts the function make_group_random of the file src/meta/txtp_process.c of the component TXTP File Handler. This manipulation causes use after free.

This vulnerability is registered as CVE-2026-105249. The attack needs to be launched locally. No exploit is available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More