CVE-2026-116727
gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm_open in gbs.c
mmitch gbsplay
CVSS
4.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bounds checks. Attackers can supply a crafted VGM file with wait opcodes and no 0x66 terminator to read past the heap buffer and crash the player.
Text from CVE List
Affected versions 1
- gbsplayaffected: all versions through 0.0.103CVE List
References 6
- github.com/mmitch/gbsplay/commit/91b1f6df0abd3914f91caa528ec3213d731999e8Fixvia CVE List
- hackmd.io/@haindpwn/gbsplay-rom-bank-index-oob-readAdvisoryvia CVE List
- vulncheck.com/advisories/gbsplay-through-0.0.103-heap-out-of-bounds-read-via-vgm-open-in-gbs-cAdvisoryvia CVE List
- github.com/mmitch/gbsplay/issues/201Referencevia CVE List
- github.com/mmitch/gbsplayReferencevia CVE List
- github.com/mmitch/gbsplay/blob/0.0.103/gbs.c#L996-L1010Referencevia CVE List