The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
http://seclists.org/fulldisclosure/2017/Jul/78 | mailing list third party advisory exploit |