Approved changes feed: RSS · Atom

cpe:2.3:a:game-music-emu_project:game-music-emu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGame Music Emu Project (120c1697-0152-5ae5-afa9-a21547ecd86b)
ProductGame Music Emu (f2da7c2e-3a40-5d29-9af5-b3a3dc1a6355)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/mpyne/game-music-emu purl2cpe 2026-06-01 10:16:49.617452
pkg:deb/debian/game-music-emu purl2cpe 2026-06-01 10:16:49.617455
pkg:deb/ubuntu/game-music-emu purl2cpe 2026-06-01 10:16:49.617457
pkg:github/shiftmediaproject/game-music-emu purl2cpe 2026-06-01 10:16:49.617460
pkg:rpm/fedora/game-music-emu purl2cpe 2026-06-01 10:16:49.617463

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111152 vulnerable 2026-11-03 10:16:11.395825 Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader
MEDIUM (5.5)
Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via gme_track_info or gme_start_track, crashing libgme consumers.
Published: 2026-10-15T18:57:40.875Z
Updated: 2026-10-16T17:10:16.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111153 vulnerable 2026-11-03 10:16:11.222418 Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_
MEDIUM (5.5)
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.
Published: 2026-10-15T18:57:41.639Z
Updated: 2026-10-15T19:42:42.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9961 vulnerable 2026-06-08 05:08:25.121315 Details available
game-music-emu before 0.6.1 mishandles unspecified integer values.
Published: 2017-06-06T18:00:00.000Z
Updated: 2024-08-06T03:07:31.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9960 vulnerable 2026-06-08 05:08:25.113160 Details available
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
Published: 2017-06-06T18:00:00.000Z
Updated: 2024-08-06T03:07:31.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9959 vulnerable 2026-06-08 05:08:25.112402 Details available
game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.
Published: 2017-04-12T20:00:00.000Z
Updated: 2024-08-06T03:07:31.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9958 vulnerable 2026-06-08 05:08:25.111737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9957 vulnerable 2026-06-08 05:08:25.110996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.