Don't Starve Together Memory Corruption via world_gen_data

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted world_gen_data with an invalid Klei persistent blob header length. Attackers can craft a malicious public lobby server listing that, once viewed or selected by the victim, triggers client-side decoding of the attacker-controlled data to corrupt native memory and cause a remote denial of service.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• kleiforums.com/game-updates/dst Yama
• vulncheck.com/…-together-memory-corruption-via-world-gen-data Üçüncü taraf

Kayıt geçmişi

1. 28 Eki 2026 20:17Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-82962Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet
• 7,8 CVE-2026-82961Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode
• 4,8 CVE-2026-103392Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
• 5,3 CVE-2026-103391Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature
• 7,5 CVE-2026-47235SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array
• 7,6 CVE-2026-86377Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 throug…