Heap Out-of-Bounds Read Vulnerability in Gbsplay by MMitch
CVE-2026-116726
4.8MEDIUM
What is CVE-2026-116726?
Gbsplay, up to version 0.0.103, is vulnerable to a heap out-of-bounds read due to improper verification of file length in the gbr_open() function. Attackers can exploit this vulnerability by providing a specially crafted GBR file, leading to memory leaks or a crash of the gbsplay application. This susceptibility arises from the lack of bounds checking before accessing the heap buffer, enabling potential information disclosure or unauthorized access to sensitive memory locations.
Affected Version(s)
gbsplay 0 <= 0.0.103
References
CVSS V4
Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology