Teeworlds

11 CVEs across 1 Teeworlds products. Browse Teeworlds vulnerabilities, severities, and proof-of-concept exploits.

Teeworlds products with known CVEs

ProductCVEs
Teeworlds11
Teeworlds CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-31518Medium5.52023-05-23A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file.
CVE-2023-31517High7.52023-05-23A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file.
CVE-2021-43518High7.82021-12-15Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buff…
CVE-2020-12066High7.52020-04-22CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.
CVE-2019-20787Critical9.82020-04-22Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
CVE-2019-10877Critical9.82019-04-05In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width a…
CVE-2019-10879Critical9.82019-04-05In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remot…
CVE-2019-10878Critical9.82019-04-05In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/data…
CVE-2018-18541High7.52018-10-20In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could sen…
CVE-2016-9400Critical9.82017-02-22The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locat…
CVE-2014-93512014-12-09engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via unspecified vectors.