CVE Feed

    Dashboard / CVE / CVE-2026-111153

    CVE-2026-111153

    Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.

    Published:Oct 15, 2026
    Last Modified:Oct 15, 2026
    EPS:Oct 15, 2026
    EPSS Score:
    CVSS Score:5.5

    Affected Products

    Vendor
    Game-music-emu Project
    Product
    Game-music-emu

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-111152 (CVSS 6.8) — Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_da…
    CVE-2017-17446 (CVSS 6.5) — The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu)…
    CVE-2016-9961 (CVSS 9.8) — game-music-emu before 0.6.1 mishandles unspecified integer values.…
    CVE-2016-9960 (CVSS 5.5) — game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash)…
    CVE-2016-9957 (CVSS 7.8) — Stack-based buffer overflow in game-music-emu before 0.6.1.…
    CVE-2016-9959 (CVSS 7.8) — game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.…
    CVE-2016-9958 (CVSS 7.8) — game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High