CVE-2016-20039

Multi Emulator Super System 0.154-3.1 Buffer Overflow

CVSS 8.6 HIGHEPSS 0.1%CWE-787

Vexday Risk Score

41Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS 8.6EPSS 0.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

28 Mar 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized gamma parameter value to overflow the stack buffer and overwrite the instruction pointer with a controlled address to achieve code execution.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

mamedev · Mess Emulator

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/39673unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://mamedev.org/https://www.exploit-db.com/exploits/39673 https://www.vulncheck.com/advisories/multi-emulator-super-system-buffer-overflow