BaselineWatch
Desk

CVE-2025-58750

9.1 critical SSVC exploitation: none Analyzed

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.

Fix

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 9.1 · rathenaNVD modified 2026-10-19 17:10

Affected (CPE criteria) 1

  • cpe:2.3:a:rathena:rathena:*:*:*:*:*:*:*:*

References 2