Posted by advisories on Sep 30

NotCVE Advisory — NotCVE-2026-0019

[-] Summary:

An out-of-bounds read in the VGM command interpreter of game-music-emu

(libgme), the open-source video game music emulation library, allows an

attacker who supplies a crafted .vgm or .vgz file to read heap memory past

the end of the buffer...