CVE-2026-24798
CVE-2026-24798
9.3
CriticalPublished:
Last updated:
Source:cve_disclosure@tech.gov.sg
Deferred
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- None
- User Interaction
- None
- Confidentiality (Vulnerable)
- None
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- High
- Confidentiality (Subsequent)
- None
- Integrity (Subsequent)
- High
- Availability (Subsequent)
- High
Description
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules). This vulnerability is associated with program files upnpreplyparse.C. This issue affects DagorEngine: through dagor_2025_01_15.
References
cve_disclosure@tech.gov.sg
https://github.com/GaijinEntertainment/DagorEngine/pull/136