Buffer Overflow Issue in Portable Puzzle Collection by Simon Tatham
CVE-2023-24284

2.9LOW

Key Information:

Vendor

Simon Tatham

Status
Portable Puzzle Collection
Vendor
CVE Published:
14 September 2026

What is CVE-2023-24284?

A buffer overflow vulnerability has been identified in the Portable Puzzle Collection prior to version 20230116.5782e29. This issue arises from improper processing within the 'is_markable()' function, potentially allowing an attacker to execute arbitrary code or cause a system crash. Users are advised to update to the latest version to mitigate any associated risks.

Affected Version(s)

Portable Puzzle Collection 0 < 20230116.5782e29

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028986
https://git.tartarus.org/?p=simon/puzzles.git;a=commit;h=...

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.