CVE-2026-90556highCWE-122

CVE-2026-90556: high-severity vulnerability in freeciv

Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load

Published · Updated

Follow this CVE+ Monitor freeciv+ Monitor freeciv

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.5epss 0.2%
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, potentially corrupting memory when a user or server operator loads the file.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
freeciv · freeciv
Related CVEs — freeciv

In the same product, most dangerous first.

CVE-2012-6083—CVE-2012-6083EPSS 11.7%CVE-2012-5645—CVE-2012-5645EPSS 4.3%CVE-2026-90557MEDIUMFreeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via SavegameEPSS 0.2%