Heap Buffer Overflow in Freeciv Affecting Multiple Versions

CVE-2026-90556

What is CVE-2026-90556?

Freeciv versions prior to 3.2.6 are susceptible to a heap buffer overflow that occurs in the worklist_load() function when processing savegame files. Attackers can exploit this vulnerability by crafting malicious savegame files where the declared worklist lengths exceed a fixed array limit of 64 elements. This exploitation can lead to memory corruption as it allows writing past the intended entries array, thereby compromising memory safety when the file is loaded by a user or server operator.

References