CVE-2026-111153

Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic Emu::mute voices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip flags 0x3F, opened through gme open data or gme open file, to read past the static array during loading and cause denial of service.