EUVD-2026-110506

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mappermap in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowed bank length. Attackers can supply crafted .gbr, .gbs or .gb files with malicious bank indexes to make bankget read far pa...

CVE-2026-116725

The gbsplay emulator (versions through 0.0.103 ) is vulnerable to an out-of-bounds read in the mapper_map() function within mapper.c. The root cause is a failure to reject ROM bank indexes that exceed the ROM size, which leads to an underflowed bank length . An attacker can exploit this by provid...

CVE-2026-116725 gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mappermap in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowed bank length. Attackers can supply crafted .gbr, .gbs or .gb files with malicious bank indexes to make bankget read far pa...