PT-2026-115159 · Libgme · Game-Music-Emu
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic Emu::mute voices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip flags 0x3F, opened through gme open data or gme open file, to read past the static array during loading and cause denial of service.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Game-Music-Emu