Freeciv (< 3.2.6) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/freeciv--3.2.6/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 12 Sep 2026 19:21:30 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgHeap Buffer Overflow in Freeciv worklist_loadhttps://feed.craftedsignal.io/briefs/2026-09-freeciv-buffer-overflow/Sat, 12 Sep 2026 19:21:30 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-freeciv-buffer-overflow/Freeciv versions prior to 3.2.6 contain a heap-based buffer overflow in the worklist_load() function that allows memory corruption via maliciously crafted savegame files.Freeciv versions before 3.2.6 are susceptible to a heap buffer overflow vulnerability located in the worklist_load() function. The vulnerability arises from improper validation of worklist lengths when the application parses savegame files. Specifically, the game software defines a fixed array limit of 64 elements for the worklist. An attacker can create a crafted savegame file that declares a worklist length exceeding this threshold. When the Freeciv engine processes this file, the subsequent memory write operation bypasses the fixed array boundary, allowing data to be written into adjacent heap-allocated struct fields. This memory corruption can occur during the standard process of loading a savegame file, potentially impacting both end-user clients and dedicated server instances that ingest untrusted game data.

Impact

Successful exploitation of this vulnerability results in heap memory corruption, which can lead to application crashes (Denial of Service) or potentially arbitrary code execution depending on the state of the heap at the time of the overflow. The vulnerability affects any user or infrastructure relying on Freeciv for game hosting that processes savegame files from potentially malicious sources.

Recommendation

  • Upgrade all Freeciv instances to version 3.2.6 or later immediately to apply the patch for CVE-2026-90556.
  • Restrict the ability to load savegame files to trusted sources or known-good environments until the update is applied.
]]>highadvisory