CVE-2024-54756

A remote code execution RCE vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a crafted PK3 file containing a malicious ZScript source file...

CVE-2024-54756

GZDoom v4.13.1 is vulnerable to a remote code execution (RCE) flaw in its ZScript function . The root cause is the improper parsing of malicious PK3 files containing malicious ZScript source files . An attacker can exploit this to execute arbitrary code on the target system. To mitigate this risk...