Devilutionx
Approved changes feed: RSS · Atom
cpe:2.3:a:diasurgical:devilutionx:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Diasurgical (d8baa00d-b990-5ad0-a6db-9816ce2ec9d3) |
|---|---|
| Product | Devilutionx (878f4a11-8cf6-5867-b2ab-9507cfaae639) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116841 |
vulnerable | 2026-11-03 10:15:21.692402 |
DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup
MEDIUM (5.5)
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
Published: 2026-10-27T00:34:00.513Z
Updated: 2026-11-05T17:24:04.368Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116842 |
vulnerable | 2026-11-03 10:15:21.426744 |
DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup
MEDIUM (6.1)
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
Published: 2026-10-27T00:34:01.167Z
Updated: 2026-10-31T02:27:46.916Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.