CVE-2026-24798

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules). This vulnerability is associated with program files upnpreplyparse.C. This issue affects DagorEngine: through dagor_2025_01_15.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - cve_disclosure@tech.gov.sg

Published

2026-01-27

Last modified

2026-01-27

Weaknesses

CWE-119

Affected products

• Dagorengine (Gaijinentertainment)

References

• https://github.com/GaijinEntertainment/DagorEngine/pull/136