rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 13 Oct 2025 18:00:00 +0000

Type Values Removed Values Added
Description rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch.
Title rAthena map-server use-after-free vulnerability in RODEX
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2025-10-13T17:45:21.365Z

Reserved: 2025-10-07T16:12:03.425Z

Link: CVE-2025-62170

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-10-13T18:15:34.980

Modified: 2025-10-13T18:15:34.980

Link: CVE-2025-62170

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.