Memory Corruption Vulnerability in Don't Starve Together by Klei Entertainment

CVE-2026-58458

What is CVE-2026-58458?

A memory corruption issue exists in the native persistent-string decoder of Don't Starve Together on public dedicated servers. This vulnerability allows malicious actors to exploit crafted world_gen_data that includes an invalid Klei persistent blob header length. When a victim joins or views a malicious public lobby, the client attempts to decode the attacker-controlled data, leading to a corruption of native memory. This can result in a remote denial of service, effectively crashing the victim's game client and disrupting gameplay.

References