CVE-2026-116726medium4.8
gbsplay through 0.0.103 Heap Out-of-Bounds Read via gbr_open GBR Title
The advisory, in context
Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attackers can supply a crafted GBR file of 0x21 to 0x162 bytes to read past the heap buffer, crashing gbsplay or leaking memory.
Affected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
References
- https://github.com/mmitch/gbsplay/issues/201
- https://github.com/mmitch/gbsplay
- https://github.com/mmitch/gbsplay/commit/33812ed38d84b800b5a17f639ef6625f76290785
- https://github.com/mmitch/gbsplay/blob/0.0.103/gbs.c#L810-L820
- https://hackmd.io/@haindpwn/gbsplay-rom-bank-index-oob-read
- https://www.vulncheck.com/advisories/gbsplay-through-0.0.103-heap-out-of-bounds-read-via-gbr-open-gbr-title