Live › vulnerability › CVE-2026-116725
Go to dashboardgbsplay, a command-line player for Game Boy sound files, has an out-of-bounds read in mapper_map() that accepts ROM bank indexes beyond the ROM size. A crafted .gbr, .gbs or .gb file makes the player read far past its heap ROM buffer and crash.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 22:25 UTC. All times on this page are UTC.
Anyone who opens untrusted .gbr, .gbs or .gb files with gbsplay, whether directly or through a script or service that feeds it files. The sources describe a crash rather than code execution, and do not say whether a patched release exists. Systems that never run gbsplay on outside files can skip it.
No product ranges from the sources yet.
gbsplay --version and compare against the version range through 0.0.103 in the NVD entrywhich gbsplayEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject ROM bank indexes beyond the ROM size, causing an underflowed bank length. Attackers can supply crafted .gbr, .gbs or .gb files with malicious bank indexes to make bank_get() read far past the heap ROM buffer and crash the player.
This page as .md · .json · in your agent: get_signal("CVE-2026-116725")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.