https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:52:43.204158+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-58447 CVE-2025-58447 — rAthena has heap-based buffer overflow in login server 2026-10-08T18:52:43.219279+00:00

Affected: rathena

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted `CA_SSO_LOGIN_REQ` with an oversized token length. This leads to immediate denial of service (crash) and it is possible to achieve remote code execution via heap corruption. Commit 2f5248b fixes the issue.