Security update for freeciv
This security update for freeciv addresses multiple issues including a heap buffer overflow and an out-of-bounds read triggered by crafted save files. Additional fixes improve game logic, logging, and user interface behavior. The update resolves vulnerabilities that could potentially lead to memory corruption. No known exploits are reported in the wild.
AI Analysis
Technical Summary
The freeciv update version 3.2.6 fixes a heap buffer overflow in the worklist_load() function and an out-of-bounds read in activities.order[], both triggered by crafted save files. These vulnerabilities could lead to memory corruption. Other fixes include corrections to unit movement legality, pathfinding, player authentication logging, audio loop issues, city growth display errors, and tech tree display logic. The previous version 3.2.5 also included various bug fixes and improvements unrelated to security. No CVSS score is provided, and no known exploits have been reported.
Potential Impact
The heap buffer overflow and out-of-bounds read vulnerabilities could allow an attacker to cause memory corruption by supplying a crafted save file. This may lead to crashes or potentially other unintended behavior. However, there is no evidence of active exploitation in the wild.
Mitigation Recommendations
Update freeciv to version 3.2.6 or later where these vulnerabilities are fixed. No additional mitigation is indicated by the vendor advisory.
Security update for freeciv
Description
This security update for freeciv addresses multiple issues including a heap buffer overflow and an out-of-bounds read triggered by crafted save files. Additional fixes improve game logic, logging, and user interface behavior. The update resolves vulnerabilities that could potentially lead to memory corruption. No known exploits are reported in the wild.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The freeciv update version 3.2.6 fixes a heap buffer overflow in the worklist_load() function and an out-of-bounds read in activities.order[], both triggered by crafted save files. These vulnerabilities could lead to memory corruption. Other fixes include corrections to unit movement legality, pathfinding, player authentication logging, audio loop issues, city growth display errors, and tech tree display logic. The previous version 3.2.5 also included various bug fixes and improvements unrelated to security. No CVSS score is provided, and no known exploits have been reported.
Potential Impact
The heap buffer overflow and out-of-bounds read vulnerabilities could allow an attacker to cause memory corruption by supplying a crafted save file. This may lead to crashes or potentially other unintended behavior. However, there is no evidence of active exploitation in the wild.
Mitigation Recommendations
Update freeciv to version 3.2.6 or later where these vulnerabilities are fixed. No additional mitigation is indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21800-1
- Cve Count
- 0
Threat ID: 6aab495b55bf5e2cf5990ad3
Added to database: 09/17/2026, 01:58:51 UTC
Last enriched: 09/17/2026, 02:05:52 UTC
Last updated: 09/17/2026, 02:05:52 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.