Approved changes feed: RSS · Atom

cpe:2.3:a:teeworlds:teeworlds:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTeeworlds (3b8f8e27-a02d-5e6e-85e3-8a86ac0d2af2)
ProductTeeworlds (bc1705fc-923e-537d-9595-865067f59582)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/teeworlds purl2cpe 2026-06-01 10:11:21.704490
pkg:deb/ubuntu/teeworlds purl2cpe 2026-06-01 10:11:21.704492
pkg:github/teeworlds/teeworlds purl2cpe 2026-06-01 10:11:21.704494
pkg:rpm/fedora/teeworlds purl2cpe 2026-06-01 10:11:21.704495
pkg:rpm/opensuse/teeworlds purl2cpe 2026-06-01 10:11:21.704496

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43518 vulnerable 2026-06-08 05:36:43.474761 Details available
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.
Published: 2021-12-15T14:33:05.000Z
Updated: 2024-08-04T03:55:29.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12066 vulnerable 2026-06-08 05:17:56.316065 Details available
CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.
Published: 2020-04-22T16:20:06.000Z
Updated: 2024-08-04T11:48:57.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20787 vulnerable 2026-06-08 05:13:41.572018 Details available
Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
Published: 2020-04-22T16:19:49.000Z
Updated: 2024-08-05T02:53:09.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18541 vulnerable 2026-06-08 05:11:14.219216 Details available
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
Published: 2018-10-20T22:00:00.000Z
Updated: 2024-08-05T11:15:59.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9400 vulnerable 2026-06-08 05:08:23.563211 Details available
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
Published: 2017-02-22T16:00:00.000Z
Updated: 2024-08-06T02:50:37.688Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.