TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute a…

CVE-2016-20040 affects TiEmu 3.03-nogdb+dfsg-3, a TI calculator emulator. The vulnerability is a buffer overflow in ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. Attackers can exploit this by supplying an oversized ROM parameter to the tiemu command-line interface, causing a stack buffer overflow that overwrites the instruction pointer with malicious addresses. This vulnerability provides local code execution capabilities and can lead to complete system compromise.