Approved changes feed: RSS · Atom

cpe:2.3:a:libgme:game-music-emu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibgme (db3a3e13-5cab-52d3-b85e-5861253fbe57)
ProductGame Music Emu (80697560-3e18-57ba-a7ad-d02d9eb2c8f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111152 vulnerable 2026-11-03 10:16:11.394712 Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader
MEDIUM (5.5)
Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via gme_track_info or gme_start_track, crashing libgme consumers.
Published: 2026-10-15T18:57:40.875Z
Updated: 2026-10-16T17:10:16.844Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111153 vulnerable 2026-11-03 10:16:11.221352 Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_
MEDIUM (5.5)
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.
Published: 2026-10-15T18:57:41.639Z
Updated: 2026-10-15T19:42:42.818Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.