CVE-2026-24798 — An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine

CVE-2026-24798

An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine PUBLISHED

Description (CNA)

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in GaijinEntertainment DagorEngine (prog/3rdPartyLibs/miniupnpc modules). This vulnerability is associated with program files upnpreplyparse.C. This issue affects DagorEngine: through dagor_2025_01_15.

Affected (CNA)

Vendor / product	Versions
GaijinEntertainment / DagorEngine	affected 0 through dagor_2025_01_15

CWE

CWE-119

References

https://github.com/GaijinEntertainment/DagorEngine/pull/136

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.