CyberRota Analysis
AI-GeneratedFreeciv versions prior to 3.2.6 are susceptible to a heap buffer overflow in the worklist_load() function, which can be exploited through maliciously crafted savegame files that exceed the fixed array limit of 64 elements. This vulnerability allows attackers to overwrite adjacent memory, potentially leading to memory corruption and arbitrary code execution. Developers and server operators using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, potentially corrupting memory when a user or server operator loads the file.