CVE-2026-105250Medium· 4.3▾ SunlitA security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file src/coding/ima_decoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attac…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file src/coding/ima_decoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-92881Medium· 4.3A security vulnerability has been detected in vgmstream
CVE-2026-92879Medium· 4.3A security flaw has been discovered in vgmstream up to r2117
CVE-2026-86515Medium· 4.3A security vulnerability has been detected in vgmstream up to r2117
CVE-2026-105251Medium· 6.3A vulnerability was detected in vgmstream up to r2117
CVE-2026-105248Medium· 6.3A security flaw has been discovered in vgmstream up to r2117
CVE-2026-105249Medium· 4.8A weakness has been identified in vgmstream up to r2117