CVE-2026-111153
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.
Risk Assessment
The vulnerability can lead to application crashes (denial of service). The risk affects applications using libgme to play untrusted NSF files.
Recommendation
Update libgme to a version newer than 0.6.5 if available, or avoid playing untrusted NSF files. Consider validating voice counts before processing.
Other vulnerabilities in Game Music Emu (libgme)
Original NVD description (English source)
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS