PT-2016-7988 · Debian+1 · Tiemu

Published 2016-01-01 · Updated 2026-05-01 · CVE-2016-20040

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TiEmu version 3.03-nogdb+dfsg-3

Description A buffer overflow exists in the ROM parameter handling. Local attackers can provide an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the instruction pointer with malicious addresses, potentially leading to application crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2016-20040

Affected Products

Tiemu

References · 10

• https://cve.org/CVERecord?id=CVE-2016-20040 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-20040 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-20040 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-20040 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-20040 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-20040 · Vendor Advisory
• http://lpg.ticalc.org/prj_tiemu · Note
• https://t.me/cveNotify/161749 · Telegram Post
• https://vulncheck.com/advisories/tiemu-nogdb-dfsg-3-buffer-overflow-via-rom-parameter · Note
• https://exploit-db.com/exploits/39692 · Note