CVE-2016-20039: Multi Emulator Super System 0.154-3.1 Buffer Overflow

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-03-28 · updated 2026-06-17
Weakness: CWE-787

Description

Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized gamma parameter value to overflow the stack buffer and overwrite the instruction pointer with a controlled address to achieve code execution.

Affected products

mamedev Mess Emulator: 0.154-3.1

References

http://mamedev.org/
https://www.exploit-db.com/exploits/39673
https://www.vulncheck.com/advisories/multi-emulator-super-system-buffer-overflow

Get alerted when CVE-2016-20039 or the next vulnerability affects your stack