Skip to content
OpenAdvisories

Product · diasurgical

DevilutionX

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-116842

    DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq__archive_dup

    DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causin…

    diasurgical DevilutionX
  • Medium 5.5
    CVE-2026-116841

    DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup

    DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq arch…

    diasurgical DevilutionX