Threats tagged 'ghsa-f826-v6gp-c5xh'

gbsplay version 0.0.103 has a heap out-of-bounds read vulnerability in the vgm_open() function within gbs.c. This flaw occurs because the function processes the VGM command stream without proper bounds checking. An attacker can exploit this by providing a specially crafted VGM file containing wait opcodes but lacking the required 0x66 terminator, causing the player to read beyond the allocated heap buffer and potentially crash.