Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-116841 1 Diasurgical 1 Devilutionx 2026-11-05 5.5 Medium
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.