CVE Feed

    Dashboard / CVE / CVE-2026-111152

    CVE-2026-111152

    Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via gme_track_info or gme_start_track, crashing libgme consumers.

    Published:Oct 15, 2026
    Last Modified:Oct 16, 2026
    EPS:Oct 15, 2026
    EPSS Score:0.0013
    CVSS Score:5.5

    Affected Products

    Vendor
    Game-music-emu Project
    Product
    Game-music-emu

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-111153 (CVSS 6.8) — Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_…
    CVE-2017-17446 (CVSS 6.5) — The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu)…
    CVE-2016-9961 (CVSS 9.8) — game-music-emu before 0.6.1 mishandles unspecified integer values.…
    CVE-2016-9960 (CVSS 5.5) — game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash)…
    CVE-2016-9957 (CVSS 7.8) — Stack-based buffer overflow in game-music-emu before 0.6.1.…
    CVE-2016-9959 (CVSS 7.8) — game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.…
    CVE-2016-9958 (CVSS 7.8) — game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High