Summary
It was discovered that the stb library, included in MAME, had a heap-based
buffer overflow. An attacker could possibly use this issue to crash the
program or execute arbitrary code. (CVE-2018-16981)
It was discovered that the tinyexr library, included in MAME, had a heap-
based buffer over-read in the function DecodePixelData. An attacker could
possibly use this issue to expose sensitive information or crash the
program. (CVE-2022-34300)
It was discovered that the expat library, included in MAME, had an
integer-overflow in the function doProlog. An attacker could possibly use
this issue to crash the program or execute arbitrary code.
(CVE-2021-46143)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.10 | mame | 0.277+dfsg.1-4ubuntu0.1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | mame | 0.195+dfsg.1-2ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | mame | 0.220+dfsg.1-1ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | mame | 0.242+dfsg.1-1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | mame | 0.264+dfsg.1-1ubuntu0.1~esm1 |
Vulnerabilities 3
-
High 8.1CVE-2021-46143 Public exploit
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
-
Unscored —
stb stb_image.h 2.19, as used in catimg, Emscripten, and other products, has a heap-based buffer overflow in the stbi__…
-
Unscored —
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.