{"id":"CVE-2016-9958","aliases":["DEBIAN-CVE-2016-9958","DLA-750-1","DSA-3735-1","EUVD-2016-10744","GHSA-jvrm-7h8w-chxm","MGASA-2016-0428","MGASA-2017-0046","SUSE-SU-2016:3250-1","UBUNTU-CVE-2016-9958"],"status":"published","title":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.0233,"percentile":0.83605,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-12-15T00:00:00Z","modified":"2026-09-22T07:02:48Z","fixes":[{"ecosystem":"Debian:12","package":"game-music-emu","fixed_in":["0.6.0-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"game-music-emu","fixed_in":["0.6.0-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"game-music-emu","fixed_in":["0.6.0-4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"game-music-emu","fixed_in":["0.5.5-2ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"game-music-emu","fixed_in":["0.6.0-3ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-4"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-2+deb7u1"}]}],"versions":["0.5.5-2"],"bundled":5},{"source":"osv","ecosystem":"Debian:8","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-2+deb8u1"}]}],"versions":["0.5.5-2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-1.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"audacious-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2.1.mga5"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:5","package":"audacious-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.2-2.1.mga5.tainted"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libgme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.5-2ubuntu0.14.04.1"}]}],"versions":["0.5.5-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"game-music-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-3ubuntu0.16.04.1"}]}],"versions":["0.5.5-2.1","0.6.0-3"]}],"products":[{"vendor":"game-music-emu_project","product":"game-music-emu"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"opensuse_project","product":"leap"},{"vendor":"suse","product":"linux_enterprise"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"},{"vendor":"suse","product":"linux_enterprise_workstation_extension"},{"vendor":"suse","product":"suse_linux_enterprise_server"}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00090.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/95305","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/15/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://scarybeastsecurity.blogspot.in/2016/12/redux-compromising-linux-using-snes.html","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence"]},{"url":"https://security.gentoo.org/glsa/201707-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://bitbucket.org/mpyne/game-music-emu/wiki/Home","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00005.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9958"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6LKMKVYS7AVB2EXC463FUYN6C6FABHME"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F7Z2OVERYM6NW3FGVGTJUNSL5ZNFSH2S"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GGHAQI5Q2XDSPGRRKPJJM3A73VWAFSFL"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHFKIFSFIDXOKFUKAH2MBNXDTY6DYBF6"},{"url":"https://github.com/advisories/GHSA-jvrm-7h8w-chxm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-9958","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0428.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19952","tags":["report"]},{"url":"http://scarybeastsecurity.blogspot.de/2016/12/redux-compromising-linux-using-snes.html","tags":["web","report"]},{"url":"https://www.debian.org/security/2016/dsa-3735","tags":["web"]},{"url":"http://openwall.com/lists/oss-security/2016/12/15/11","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2017-0046.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20177","tags":["report"]},{"url":"http://advisories.mageia.org/MGASA-2016-0428.html","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163250-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1015941","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9961","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-9958","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/15/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9958","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-9958","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2017-04-12T20:00:00Z","modified":"2024-08-06T03:07:31.788Z","updated_at":"2026-11-02T14:33:32.103757Z"}],"euvd":[{"id":"EUVD-2016-10744","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2017-04-12T20:00:00Z","modified":"2024-08-06T03:07:31Z","updated_at":"2026-11-03T02:22:25.833438Z"}],"ghsa":[{"id":"GHSA-jvrm-7h8w-chxm","title":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2022-05-14T02:04:28Z","modified":"2025-04-20T03:37:00Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:44.663713Z"}],"nvd":[{"id":"CVE-2016-9958","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2017-04-12T20:59:00.37Z","modified":"2026-06-17T00:56:50.257Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:37.619685Z"}],"osv":[{"id":"CVE-2016-9958","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2017-04-12T20:59:00.37Z","modified":"2026-04-16T06:16:04.73607534Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"DEBIAN-CVE-2016-9958","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2017-04-12T20:59:00.37Z","modified":"2026-09-22T07:02:48.760882114Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"UBUNTU-CVE-2016-9958","description":"game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.","status":"published","published":"2017-04-12T20:59:00Z","modified":"2026-04-22T11:07:47.898015Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:13.356796Z"},{"id":"DLA-750-1","title":"game-music-emu - security update","status":"published","published":"2016-12-17T00:00:00Z","modified":"2026-03-09T02:11:19.635772Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3735-1","title":"game-music-emu - security update","status":"published","published":"2016-12-15T00:00:00Z","modified":"2026-03-09T01:22:25.487302Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0428","title":"Updated game-music-emu packages fix security vulnerabilities","description":"Chris Evans discovered that incorrect emulation of the SPC700 audio\nco-processor of the Super Nintendo Entertainment System allows the\nexecution  of arbitrary code if a malformed SPC music file is opened\n(CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960,\nCVE-2016-9961).\n","status":"published","published":"2016-12-29T10:29:11Z","modified":"2026-04-16T06:26:05.438500703Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2017-0046","title":"Updated audacious-plugins packages fix security vulnerability","description":"Chris Evans discovered that incorrect emulation of the SPC700 audio\nco-processor of the Super Nintendo Entertainment System allows the\nexecution of arbitrary code if a malformed SPC music file is opened\n(CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960,\nCVE-2016-9961).\n\nThese issues were previously fixed in MGASA-2016-0428 in the\ngame-music-emu library, but audacious-plugins contains a decoder built\nwith a bundled copy, which has been patched to fix the issues.\n","status":"published","published":"2017-02-11T23:47:14Z","modified":"2026-04-16T06:22:33.371067736Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2016:3250-1","title":"Security update for libgme","description":"\nThis update for libgme fixes the following issues:\n\n- CVE-2016-9957, CVE-2016-9958, CVE-2016-9959, CVE-2016-9960, CVE-2016-9961:\n  Various issues were fixed in the handling of SPC music files that could have\n  been exploited for gaining privileges of desktop users. [bsc#1015941]\n","status":"published","published":"2016-12-22T15:10:53Z","modified":"2026-02-04T03:19:57.664247Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}