CVE-2026-116726
gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Title
mmitch gbsplay
CVSS
4.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attackers can supply a crafted GBR file of 0x21 to 0x162 bytes to read past the heap buffer, crashing gbsplay or leaking memory.
Text from CVE List
Affected versions 1
- gbsplayaffected: all versions through 0.0.103CVE List
References 6
- github.com/mmitch/gbsplay/commit/33812ed38d84b800b5a17f639ef6625f76290785Fixvia CVE List
- hackmd.io/@haindpwn/gbsplay-rom-bank-index-oob-readAdvisoryvia CVE List
- vulncheck.com/advisories/gbsplay-through-0.0.103-heap-out-of-bounds-read-via-gbr-open-gbr-titleAdvisoryvia CVE List
- github.com/mmitch/gbsplay/issues/201Referencevia CVE List
- github.com/mmitch/gbsplayReferencevia CVE List
- github.com/mmitch/gbsplay/blob/0.0.103/gbs.c#L810-L820Referencevia CVE List