See how game music emu compares to other vendors in security performance
Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opened through gmeopendata or gmeopenfile, to read past the static array during loading and cause denial of service.
Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader getdata function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via gmetrackinfo or gmestarttrack, crashing libgme consumers.