VYPR

libsidplayfp

by Libsidplayfp

CVEs (1)

  • CVE-2026-111148MedOct 15, 2026
    risk 0.36cvss 5.5epss —

    libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. Attackers can set the header data offset beyond the file size, wrapping the length calculation so…