Product
Sonic 3 A.I.R. versions before commit 2492d18 are vulnerable to a remote denial-of-service attack due to improper bounds checking on UDP packet IDs, leading to memory exhaustion and server crashes.