CVE-2026-116726

EUVD-2026-110474
Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attackers can supply a crafted GBR file of 0x21 to 0x162 bytes to read past the heap buffer, crashing gbsplay or leaking memory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 2.34%
Common Weakness Enumeration
References
https://github.com/mmitch/gbsplay
https://github.com/mmitch/gbsplay/blob/0.0.103/gbs.c#L810-L820
https://github.com/mmitch/gbsplay/commit/33812ed38d84b800b5a17f639ef6625f76290785
https://github.com/mmitch/gbsplay/issues/201
https://hackmd.io/@haindpwn/gbsplay-rom-bank-index-oob-read
https://www.vulncheck.com/advisories/gbsplay-through-0.0.103-heap-out-of-bounds-read-via-gbr-open-gbr-title