CyberRota Analysis
AI-GeneratedFreeciv versions 3.1.0 through 3.2.5 are vulnerable to an out-of-bounds read issue in the sg_load_player_unit() function, which can be exploited through specially crafted savegame files containing invalid unit activity indices. This vulnerability may lead to application crashes or potential exposure of limited heap memory. Developers and system administrators using affected Freeciv versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded.