CVE-2023-24291
LowCVSS 2.9Summary
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter.
Risk Assessment
An attacker can exploit the buffer overflow to execute arbitrary code or cause an application crash, leading to confidentiality and availability breaches.
Recommendation
Upgrade Portable Puzzle Collection to version 20230116.5782e29 or later to address the vulnerability.
Other vulnerabilities in Portable Puzzle Collection
See all- CVE-2023-24288Low
An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.
- CVE-2023-24287Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command.
- CVE-2023-24286Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter.
- CVE-2023-24285Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed.
- CVE-2023-24284Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. This vulnerability could be exploited by an attacker to cause a crash or potentially execute code.
- CVE-2023-24283Low
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file.
Original NVD description (English source)
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter.