CVE-2026-116726
LOW
NVD
CVSS Score
3.3
Severity
LOW
Published
Oct 26, 2026
Vendor
unknown
Description
Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify file length before scanning the GBR ROM title field. Attackers can supply a crafted GBR file of 0x21 to 0x162 bytes to read past the heap buffer, crashing gbsplay or leaking memory.