Read the docs

libgme

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

libgme records in CISA KEV

No libgme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 63

Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-en…

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00128 Published 2026-10-15 No fix listed CWE-125
Priority MEDIUM 63

Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00128 Published 2026-10-15 No fix listed CWE-125
TI-2026-00014 CVE-2026-0017 · GHSA-7332-r538-h7hp

Improper authorization in Google Android

Priority LOW 35

In onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to a logic error in the code.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00202 Published 2026-03-02 No fix listed CWE-285
Priority LOW 24

In multiple functions of AccessibilityManagerService.java, there is a possible persistent denial of service due to improper input validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00119 Published 2026-06-01 No fix listed CWE-20
Priority LOW 15

In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a permissions bypass.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00104 Published 2026-06-01 No fix listed CWE-269
Open these records in search →