CVE-2016-20040

TiEmu 3.03-nogdb+dfsg-3 Buffer Overflow via ROM Parameter

CVSS 8.6 HIGHEPSS 0.2%CWE-22

Vexday Risk Score

41Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 8.6EPSS 0.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

28 Mar 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can supply an oversized ROM parameter to the tiemu command-line interface to overflow the stack buffer and overwrite the instruction pointer with malicious addresses.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

ticalc · Texas Instrument Emulator

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/39692unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lpg.ticalc.org/prj_tiemu/https://www.exploit-db.com/exploits/39692 https://www.vulncheck.com/advisories/tiemu-nogdb-dfsg-3-buffer-overflow-via-rom-parameter