PT-2026-50249 · Snes9X Team · Snes9X

Published 2026-06-17 · Updated 2026-06-17 · CVE-2026-39199

Positive Technologies (AI Summary)

CVSS v3.1

2.9

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions snes9x version 1.63

Description An out-of-bounds write occurs when loading a ROM alongside a crafted .ups patch file, which can lead to a denial of service and cause the emulator to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-39199

Affected Products

Snes9X

References · 4

• https://github.com/snes9xgit/snes9x/issues/1035 · Note
• https://github.com/snes9xgit/snes9x/commit/96b366100172723f6314c40e237b370f4f7b59f4 · Note
• https://twitter.com/Squeal/status/2067122365822386338 · Twitter Post
• https://karansaini.com/snes9x-oob-write · Note