The vulnerability is an out-of-bounds write that corrupts memory within the Commander‑Genius application. If successfully triggered, an attacker could overwrite adjacent memory, potentially leading to arbitrary code execution or a forced crash, which compromises the integrity of the system running the game.

Users running Commander‑Genius from gerstrong who have not upgraded beyond the snapshot preceding Release refs/pull/358/merge are affected. The exact version numbers are not listed, but any build compiled before that merge is vulnerable.

The CVSS score is 7.5, indicating a high severity, while the EPSS score is below 1%, suggesting a very low exploitation probability at this time. The vulnerability is not listed in the CISA KEV catalog. The most likely attack vector is local, requiring the user to provide input that causes the out-of-bounds write during normal gameplay or data processing. No direct exploitation technique is disclosed, but an attacker with sufficient privileges or control over the game’s input could potentially exploit it to run arbitrary code.