CVE-2026-90557
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded.
Risk Assessment
The vulnerability can lead to application crashes and potential heap memory data leakage, posing a threat to the stability and confidentiality of systems using Freeciv.
Recommendation
Update Freeciv to version 3.2.6 or later to fix the vulnerability.
Other vulnerabilities in Freeciv
Original NVD description (English source)
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS