CVE-2023-24288
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.
Risk Assessment
An attacker can exhaust system resources, causing the application to become unavailable to legitimate users.
Recommendation
Upgrade Portable Puzzle Collection to version 20230116.5782e29 or later to address the vulnerability.
Other vulnerabilities in Portable Puzzle Collection
See all- CVE-2023-24291Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter.
- CVE-2023-24287Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command.
- CVE-2023-24286Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter.
- CVE-2023-24285Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed.
- CVE-2023-24284Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. This vulnerability could be exploited by an attacker to cause a crash or potentially execute code.
- CVE-2023-24283Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file.
Original NVD description (English source)
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS