CVE-2026-116727

The software gbsplay (versions through 0.0.103 ) is vulnerable to a heap out-of-bounds read in the vgm_open() function within gbs.c. The root cause is a lack of bounds checks while walking the VGM command stream . An attacker can provide a maliciously crafted VGM file containing wait opcodes with...

CVE-2026-116725 gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mappermap in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowed bank length. Attackers can supply crafted .gbr, .gbs or .gb files with malicious bank indexes to make bankget read far pa...

CVE-2026-116725

The gbsplay emulator (versions through 0.0.103 ) is vulnerable to an out-of-bounds read in the mapper_map() function within mapper.c. The root cause is a failure to reject ROM bank indexes that exceed the ROM size, which leads to an underflowed bank length . An attacker can exploit this by provid...