A heap out-of-bounds read vulnerability exists in gbsplay through version 0.0.103 in the vgm_open() function within gbs.c. This vulnerability allows attackers to supply a crafted VGM file with wait opcodes and no 0x66 terminator, potentially causing the player to crash. The vulnerability is caused by a lack of bounds checking when walking the VGM command stream. Defenders should verify the version in use [truncated]
A vulnerability in gbsplay through 0.0.103 allows for an out-of-bounds read via the mapper_map ROM bank index. This issue arises from the failure of the mapper_map() function in mapper.c to reject ROM bank indexes that exceed the ROM size, leading to an underflowed bank length. By providing crafted .gbr, .gbs, or .gb files with malicious bank indexes, attackers can cause the bank_get() function to read fa [truncated]
