CVE-2023-31518 — Use After Free in Teeworlds

CWE-416 — Use After Free4 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 88.21%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Teeworlds Debian Teeworlds

Timeline

PublishedMay 23

Description

A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶debiandebian/teeworlds

▶NVDteeworlds/teeworlds0.7.5

🔴Vulnerability Details

OSV

CVE-2023-31518: A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0↗2023-05-23

▶

GHSA

GHSA-rgg3-6345-v5q4: A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0↗2023-05-23

▶

📋Vendor Advisories

Debian

CVE-2023-31518: teeworlds - A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0....↗2023

▶