{"id":"CVE-2026-39199","details":"snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file.","modified":"2026-08-12T16:23:56.754810Z","published":"2026-06-17T00:00:00Z","database_specific":{"cna_assigner":"mitre","cwe_ids":["CWE-787"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39199.json"},"references":[{"type":"WEB","url":"https://karansaini.com/snes9x-oob-write/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39199.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39199"},{"type":"REPORT","url":"https://github.com/snes9xgit/snes9x/issues/1035"},{"type":"FIX","url":"https://github.com/snes9xgit/snes9x/commit/96b366100172723f6314c40e237b370f4f7b59f4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/snes9xgit/snes9x","events":[{"introduced":"0"},{"fixed":"96b366100172723f6314c40e237b370f4f7b59f4"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"last_affected":"1.63"}]}}],"versions":["1.63","1.62.3","1.62.2","1.62.1","1.62","1.61","1.60","1.59.2","1.59.1","1.59","1.58","1.57","1.56.2","1.56.1","1.56","1.55","1.54.1","1.54","1.53a","1.53","1.52"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39199.json","vanir_signatures_modified":"2026-08-12T16:23:56Z","vanir_signatures":[{"target":{"file":"memmap.cpp"},"deprecated":false,"digest":{"line_hashes":["237793978649698808645407122816158080768","240650424735410410287698339852980331568","182004812249352264556856505651700875951","139049804054012269335212065855462569410"],"threshold":0.9},"id":"CVE-2026-39199-4e002d1e","signature_type":"Line","signature_version":"v1","source":"https://github.com/snes9xgit/snes9x/commit/96b366100172723f6314c40e237b370f4f7b59f4"},{"deprecated":false,"digest":{"function_hash":"150877881658155293726144271207618129571","length":1735},"id":"CVE-2026-39199-6e21fe48","signature_type":"Function","signature_version":"v1","source":"https://github.com/snes9xgit/snes9x/commit/96b366100172723f6314c40e237b370f4f7b59f4","target":{"file":"memmap.cpp","function":"ReadUPSPatch"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}