CVE-2026-24798

Critical

Published: 27/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Improper restriction of memory buffer operations in DagorEngine (miniupnpc modules) related to upnpreplyparse.C files. Versions through dagor_2025_01_15 are affected.

Risk Assessment

An attacker could exploit the flaw to read or write out of bounds, potentially leading to information disclosure or code execution.

Recommendation

Update DagorEngine to a version newer than dagor_2025_01_15 if available, or apply the vendor's patch.

Original NVD description (English source)

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules). This vulnerability is associated with program files upnpreplyparse.C. This issue affects DagorEngine: through dagor_2025_01_15.