CVE-2026-39199

State: Published
Severity: 2.9 Low
Published: Jun 17, 2026
Updated: Jun 17, 2026
Reserved: Apr 6, 2026

Description

snes9x 1.63 allows an out-of-bounds write and denial of service via a crafted .ups file.

Scores

CVSS	Score	Vector	Source
3.1	2.9 Low	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L	mitre

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
Snes9XSnes9X team	1.63Affected

References

https://github.com/snes9xgit/snes9x/issues/1035
https://karansaini.com/snes9x-oob-write/
https://github.com/snes9xgit/snes9x/commit/96b366100172723f6314c40e237b370f4f7b59f4

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.