CVE-2026-105250 MEDIUM

CVE-2026-105250: vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

Vendor N/A
Product vgmstream
Weakness CWE-369
Published October 5, 2026
Last update October 5, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X

What the vulnerability does

01Description

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file src/coding/ima_decoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely.

Key dates

02Disclosure timeline

October 5, 2026 CVE published