Threats tagged 'ghsa-hxrq-hmg2-w94v'

Don't Starve Together through build 747465 has a memory-corruption vulnerability in its native persistent-string decoder. A remote attacker operating a public dedicated server can exploit this by publishing crafted world_gen_data with an invalid persistent blob header length. When a victim views or selects the malicious public lobby server, the client decodes attacker-controlled data, causing native memory corruption and a remote denial of service (crash).