Approved changes feed: RSS · Atom
cpe:2.3:a:mmitch:gbsplay:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mmitch (c156c5c2-b229-501b-bb86-54023ec4a342) |
|---|---|
| Product | Gbsplay (2365404e-6a5d-56df-a565-6ca199f07484) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116726 |
vulnerable | 2026-11-03 10:15:21.983079 |
gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Title
LOW (3.3)
Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attackers can supply a crafted GBR file of 0x21 to 0x162 bytes to read past the heap buffer, crashing gbsplay or leaking memory.
Published: 2026-10-26T21:52:29.528Z
Updated: 2026-10-27T14:17:32.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116727 |
vulnerable | 2026-11-03 10:15:21.807808 |
gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm_open in gbs.c
LOW (3.3)
gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM command stream without bounds checks. Attackers can supply a crafted VGM file with wait opcodes and no 0x66 terminator to read past the heap buffer and crash the player.
Published: 2026-10-26T21:52:30.198Z
Updated: 2026-11-05T16:47:01.089Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116725 |
vulnerable | 2026-11-03 10:15:21.628026 |
gbsplay through 0.0.103 Out-of-Bounds Read via mapper_map ROM Bank Index
MEDIUM (5.5)
gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowed bank length. Attackers can supply crafted .gbr, .gbs or .gb files with malicious bank indexes to make bank_get() read far past the heap ROM buffer and crash the player.
Published: 2026-10-26T21:52:28.842Z
Updated: 2026-11-02T18:20:53.778Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.