CVE-2026-90557

Freeciv versions 3.1.0 through 3.2.5 are affected by an out-of-bounds read in sg_load_player_unit() triggered when loading a crafted savegame file containing an out-of-range unit activity index that bypasses bounds checking. The impact is a crash or limited heap memory exposure , yielding a CVSS ...

PT-2026-90716

Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist load when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated...

PT-2026-90717

Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg load player unit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...