CVE-2026-105249Published
vgmstream TXTP File txtp_process.c make_group_random use after free
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-105249 · Microsoft / collected KEV context
cve-program · CVE-2026-105249
- https://vuldb.com/vuln/413456
- https://vuldb.com/vuln/413456/cti
- https://vuldb.com/cve/CVE-2026-105249
- https://vuldb.com/submit/976279
- https://github.com/vgmstream/vgmstream/issues/1998
- https://github.com/vgmstream/vgmstream/pull/2008
- https://github.com/vgmstream/vgmstream/commit/ae37662ad626254ddd96ad69ac263792d7a92024
- https://github.com/vgmstream/vgmstream/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.