[joenot443]

In all my years of emulation, I've never come across a malicious ROM for a major console.

Dolphin runs its own VM. Obviously anything is possible, but developing some kind of breakout-ROM which would infect the host machine is just way more engineering than I could imagine ever being worth it. The vector is just too complex, and the target (nerds downloading retro games) just isn't worth the squeeze.

Archive.org actually hosts a good chunk of the major Gamecube ROMs. Good luck!

[0x0]

The breakout engineering to exploit Dolphin has already happened, see for example:

* https://dougallj.wordpress.com/2016/11/13/exploiting-dolphin...

* https://gist.github.com/hthh/502ae16db55612f64d3966769a154c3...

* https://github.com/dolphin-emu/dolphin/pull/4447

[joenot443]

Woah! This I was not aware of - that's really cool actually. Hats off to u/dougall.