Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-24798 EUVD-2026-4722GHSA-23fx-gfqr-cvpx

An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine

Published Jan 27, 2026 · Updated Jan 27, 2026 · Assigned by GovTech CSG

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules). This vulnerability is associated with program files upnpreplyparse.C.

This issue affects DagorEngine: through dagor_2025_01_15.

Affected products

VendorProductAffectedFixed
GaijinEntertainment DagorEngine — —

References