EUVD-2022-29036

Malicious code in bioql PyPI...

Authentication flaw

The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For example, ability to send a push message to hundreds of thousands of machines is only restricted o...

CVE-2022-24126

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170...

CVE-2022-24126

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170...

Buffer overflow

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170...

CVE-2022-24125

Dark Souls III’s matchmaking server vulnerability CVE-2022-24125 allows remote attackers to send arbitrary push messages to clients via RequestSendMessageToPlayers, bypassing client-side restrictions. The issue affects DS3 versions up to 2022-03-19 and can enable large-scale pushes to hundreds of...

CVE-2022-24125

The matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow remote attackers to send arbitrary push requests to clients via a RequestSendMessageToPlayers request. For example, ability to send a push message to hundreds of thousands of machines is only restricted o...

CVE-2022-24126

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170...

CVE-2022-24126

CVE-2022-24126 describes a buffer overflow in the NRSessionSearchResult parser used by Bandai Namco FromSoftware’s Dark Souls III. The vulnerability arises from unsafe handling of a stack-allocated DLMemoryInputStream and a size/buffer parsing path within the NRSSR parsing flow, enabling an attac...