彙總 teeworlds 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
常見弱點模式包括 緩衝區溢位、輸入驗證問題與記憶體損壞，在 軟體部署與生產負載 使用場景中可能帶來 應用程式崩潰、記憶體損壞與異常行為 等風險。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2023-31518 | A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file. | [email protected] | 5.5 | 0.32% | 2023-05-23 | 2025-01-31 |
| CVE-2023-31517 | A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file. | [email protected] | 7.5 | 0.93% | 2023-05-23 | 2024-11-21 |
| CVE-2021-43518 | Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution. | [email protected] | 7.8 | 1.38% | 2021-12-15 | 2024-11-21 |
| CVE-2020-12066 | CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. | [email protected] | 7.5 | 2.96% | 2020-04-22 | 2024-11-21 |
| CVE-2019-20787 | Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. | [email protected] | 9.8 | 1.51% | 2020-04-22 | 2024-11-21 |
| CVE-2019-10877 | In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled. | [email protected] | 9.8 | 2.24% | 2019-04-05 | 2024-11-21 |
| CVE-2019-10879 | In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled. | [email protected] | 9.8 | 4.97% | 2019-04-05 | 2024-11-21 |
| CVE-2019-10878 | In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution. | [email protected] | 9.8 | 3.94% | 2019-04-05 | 2024-11-21 |
| CVE-2018-18541 | In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets. | [email protected] | 7.5 | 3.02% | 2018-10-20 | 2024-11-21 |
| CVE-2016-9400 | The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling. | [email protected] | 9.8 | 3.65% | 2017-02-22 | 2026-05-13 |
| CVE-2014-9351 | engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via unspecified vectors. | [email protected] | 6.4 | 2.73% | 2014-12-09 | 2026-05-06 |