rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/rathena/rathena/commit/0cc348b186bbcc3c604c17c39589a319f27d469b Patch
- https://github.com/rathena/rathena/security/advisories/GHSA-pjh7-jgr8-4ff6 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 9.1 · rathenaNVD modified 2026-10-19 17:10
Affected (CPE criteria) 1
cpe:2.3:a:rathena:rathena:*:*:*:*:*:*:*:*