CVE-2026-111153
Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F, opened through gme_open_data or gme_open_file, to read past the static array during loading and cause denial of service.
| CWE | CWE-125 |
| Vendor | libgme |
| Product | game-music-emu |
| Published | Oct 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for libgme game-music-emu
Be the first to know when new medium vulnerabilities affecting libgme game-music-emu are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
libgme / game-music-emu
0 ≤ 0.6.5
References
hackmd.io: https://hackmd.io/@haind-pwn/libgme-ay-track-table-underflow-oob-read github.com: https://github.com/libgme/game-music-emu/blob/9e23d10f9fd2a6a2f33b10912dd8dc7153258995/gme/Nsf_Emu.cpp#L212-L218 github.com: https://github.com/libgme/game-music-emu/blob/9e23d10f9fd2a6a2f33b10912dd8dc7153258995/gme/Classic_Emu.cpp#L66-L80 github.com: https://github.com/libgme/game-music-emu/issues/164 github.com: https://github.com/libgme/game-music-emu vulncheck.com: https://www.vulncheck.com/advisories/game-music-emu-libgme-through-0.6.5-out-of-bounds-read-via-classic-emu-mute-voices
Credits
IzaiahSun HaiND from the Post and Telecommunication Institute of Technology