VULNERABILITY INTELLIGENCE

CVE-2016-20039

CVSS score8.6 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-03-28
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized gamma parameter value to overflow the stack buffer and overwrite the instruction pointer with a controlled address to achieve code execution.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references