Emulation Security

Heap Buffer Overflow in drawgfx.c: How ROM Dimensions Can Lead to Code Execution

A heap buffer overflow vulnerability in MAME's drawgfx.c allowed attackers to craft malicious ROM files with manipulated width/height values, causing memcpy to write beyond allocated buffer boundaries and potentially overwrite function pointers for arbitrary code execution. The fix introduces proper buffer-length validation before the copy operation, closing a dangerous attack vector that existed wherever untrusted ROM data controlled memory operations. Understanding this class of vulnerability