Buffer Overflow Vulnerability in Portable Puzzle Collection by Tartarus
CVE-2023-24283

2.9LOW

Key Information:

Vendor

Simon Tatham

Status
Portable Puzzle Collection
Vendor
CVE Published:
14 September 2026

What is CVE-2023-24283?

A buffer overflow vulnerability has been identified in Portable Puzzle Collection prior to version 20230116.5782e29. This weakness allows attackers to exploit specially crafted save files, potentially leading to a Denial of Service (DoS) situation. Users must ensure they are using the latest version to mitigate risk.

Affected Version(s)

Portable Puzzle Collection 0 < 20230116.5782e29

References

https://git.tartarus.org/?p=simon/puzzles.git;a=commit;h=...
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028986

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.