EUVD-2026-110506

gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mappermap in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowed bank length. Attackers can supply crafted .gbr, .gbs or .gb files with malicious bank indexes to make bankget read far pa...