libMirage 3.2.2 in CDemu has a NULL pointer dereference in the NRG parser in parser.c.
https://sourceforge.net/p/cdemu/bugs/118/
https://gist.github.com/andreafioraldi/343d9ba64060b548c02362a5e61ec932
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00037.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00025.html