CVE-2026-116726

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103

Description A heap out-of-bounds read occurs in the gbr open() function within gbs.c because the software fails to verify the file length before scanning the GBR ROM title field. An attacker can provide a specially crafted GBR file with a size between 0x21 and 0x162 bytes to read data beyond the heap buffer, which may lead to memory leaks or application crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.