[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
Posted by advisories on Sep 30----------------------------------------------------------------------------
NotCVE Advisory — NotCVE-2026-0018
---------------------------------------------------------------------------- [-] Summary:
An out-of-bounds read in the GYM playback path of game-music-emu (libgme),
the open-source video game music emulation library, allows an attacker who
supplies a crafted .gym file to read heap memory past the end of the
allocation holding the...