CVE-2016-20040CWE-22

TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter

High · published March 28, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the instruction pointer with malicious addresses.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-03-28T11:58Z
EPSS history
Timeline
  • 28 MAR 11:58Z
    TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter
    cvelistv5