CVE-2025-58750: rAthena missing bound check in chclif_parse_moveCharSlot
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in chclifparsemoveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58750?
CVE-2025-58750 has been classified with a high severity due to its potential to cause out-of-bounds read and write vulnerabilities.
How do I fix CVE-2025-58750?
To remediate CVE-2025-58750, upgrade rAthena to versions after commit 0cc348b.
What are the consequences of CVE-2025-58750?
CVE-2025-58750 allows attackers to manipulate character movement, potentially leading to system instability or unauthorized access.
Which versions of rAthena are affected by CVE-2025-58750?
All rAthena versions prior to commit 0cc348b are vulnerable to CVE-2025-58750.
What type of vulnerability is CVE-2025-58750?
CVE-2025-58750 is an out-of-bounds vulnerability occurring in the chclif_parse_moveCharSlot function.