CVE-2026-92881
MEDIUMCVSS 4.3Description
A security vulnerability has been detected in vgmstream. The affected element is the function init_vgmstream_awb_memory of the file src/meta/awb.c of the component AWB parser. Such manipulation leads to divide by zero. The attack can be executed remotely. The name of the patch is ae37662ad626254ddd96ad69ac263792d7a92024. A patch should be applied to remediate this issue.
Timeline
Published:September 17th, 2026 4:18 PM
Last modified:September 23rd, 2026 5:17 PM
CVSS Scoring
CVSS v3: 4.3 (MEDIUM)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v2: 5.0
References & Reports
Advisories, patches, and third-party reports
- https://github.com/vgmstream/vgmstream/
- https://github.com/vgmstream/vgmstream/commit/ae37662ad626254ddd96ad69ac263792d7a92024
- https://github.com/vgmstream/vgmstream/issues/1996
- https://github.com/vgmstream/vgmstream/pull/2008
- https://vuldb.com/cve/CVE-2026-92881
- https://vuldb.com/submit/942165
- https://vuldb.com/vuln/406347
- https://vuldb.com/vuln/406347/cti
Source: NIST NVD · Data may lag official sources by up to one minute