Threats tagged 'ghsa-vhg9-cjjj-f7v6'

gbsplay version 0.0.103 contains an out-of-bounds read vulnerability in the mapper_map() function within mapper.c. This flaw occurs because the function does not properly reject ROM bank indexes that exceed the ROM size, leading to an underflowed bank length. Crafted .gbr, .gbs, or .gb files with malicious bank indexes can cause the bank_get() function to read beyond the allocated heap ROM buffer, resulting in a crash of the player application.