Vulnerabilidades de Freeciv
CVEs publicadas que afetam produtos de Freeciv: 2 registro(s), com severidade, exploração e correções.
CVE-2026-90557
Média · 6.1
CWE-125 12/09/2026
Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded.
CVE-2026-90556
Alta · 7.8
CWE-122 12/09/2026
Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, potentially corrupting memory when a user or server operator loads the file.