EUVD-2026-76902

Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...

CVE-2026-90557

Freeciv versions 3.1.0 through 3.2.5 are affected by an out-of-bounds read in sg_load_player_unit() triggered when loading a crafted savegame file containing an out-of-range unit activity index that bypasses bounds checking. The impact is a crash or limited heap memory exposure , yielding a CVSS ...

PT-2026-90716

Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist load when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...

Linux Distros Unpatched Vulnerability : CVE-2026-90556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Freeciv versions before 3.2.6 contain a heap buffer overflow in worklistload when processing savegame files with declared worklist lengths exceeding the fixed...

PT-2026-90717

Name of the Vulnerable Software and Affected Versions Freeciv versions 3.1.0 through 3.2.5 Description An out-of-bounds read occurs in the sg load player unit function when processing savegame files containing invalid unit activity indices. A malicious savegame file with an out-of-range activity...