Read the docs

vgmstream

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

vgmstream records in CISA KEV

No vgmstream vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 55

vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c, whose bit reader refills without checking the data_u32 array end.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.00168 Published 2026-10-14 No fix listed CWE-125
Open these records in search →