Threats tagged 'ghsa-42qr-7pw2-w47j'

CVE-2026-19212 is a vulnerability in WonderTrader versions up to 0.9.9 affecting the TraderATP Cash Trade Conversion component. It involves a use of uninitialized variable triggered by manipulation of the m_offsetType argument in the file src/Includes/WTSTradeDef.hpp. The vulnerability can be exploited remotely and has been publicly disclosed. The vendor has not responded to the disclosure. The CVSS score is 4.3, indicating medium severity, with an impact limited to availability.