libretro / parallel-n64

Optimized/rewritten Nintendo 64 emulator made specifically for Libretro. Originally based on Mupen64 Plus.
309 stars 128 forks source link

[Security] Fixed multiple buffer overflow vulnerabilities leading to arbitrary code execution #776

Closed mpharoah closed 2 weeks ago

mpharoah commented 2 weeks ago

Backporting security fixes from the Parallel Launcher core to the upstream ParallelN64 core.

This patch fixes multiple vulnerabilities in which bounds checking on DMA operations is either implemented incorrectly or is missing entirely, allowing a malicious romhack or homebrew rom to write arbitrary data outside of the emulated RAM buffers, ultimately leading to full arbitrary code execution on the host machine.