The MemFileReader::readavail function in DataReader.cpp in the GameMusicEmu library (aka game-music-emu) 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17446.json"