Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-58392

PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint

PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. Attackers can supply a crafted archive with entry names ending in six-octet sequences, causing PHYSFS_utf8stricmp() and hashing to over-read and crash the application.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Icculus
Products
Physicsfs
CVE-2026-112009

smpeg through 2.0.0 Heap Out-of-Bounds Read via MPEGsystem::FillBuffer

smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashes applications opening it through SMPEG_new, SMPEG_new_rwops, or SMPEG_new_data.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Icculus
Products
Smpeg
CVE-2026-112010

smpeg through 2.0.0 Integer Underflow via stream_header in MPEGsystem.cpp

smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a reachable assertion or out-of-bounds copy, crashing the application.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Icculus
Products
Smpeg
CVE-2009-3637

alienarena: Buffer overflow by processing specially-crafted UDP reply from game server (ACE)

Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.

CVSS 2.0 · 10.0 Critical EPSS 7.6% KEV · Not listed
Vendors
Icculus
Products
Alien Arena