rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 09 Sep 2025 22:30:00 +0000

Type Values Removed Values Added
Description rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.
Title rAthena missing bound check in chclif_parse_moveCharSlot
Weaknesses CWE-119
CWE-125
CWE-787
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-09-09T22:14:40.265Z

Reserved: 2025-09-04T19:18:09.498Z

Link: CVE-2025-58750

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-09T23:15:36.870

Modified: 2025-09-09T23:15:36.870

Link: CVE-2025-58750

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.