{"id":"CVE-2026-33250","summary":"Crash when receiving specially-crafted packets","details":"Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player's machine. Authentication is not needed and, by default, logs do not contain any useful information. All users should upgrade to Freeciv21 version 3.1.1. Running the server behind a firewall can help mitigate the issue for non-public servers. For local games, Freeciv21 restricts connections to the current user and is therefore not affected.","aliases":["GHSA-f76g-6w3f-f6r3"],"modified":"2026-08-12T15:32:36.727795Z","published":"2026-03-23T23:38:02.070Z","related":["openSUSE-SU-2026:10401-1","openSUSE-SU-2026:20423-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-121","CWE-20"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33250.json"},"references":[{"type":"WEB","url":"https://github.com/longturn/freeciv21/releases/tag/v3.1.1"},{"type":"WEB","url":"https://redmine.freeciv.org/issues/1955"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33250.json"},{"type":"ADVISORY","url":"https://github.com/longturn/freeciv21/security/advisories/GHSA-f76g-6w3f-f6r3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33250"},{"type":"FIX","url":"https://github.com/longturn/freeciv21/commit/ad8e18ca22595529599782b2984bf44df8d69ed6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/longturn/freeciv21","events":[{"introduced":"0"},{"fixed":"ad8e18ca22595529599782b2984bf44df8d69ed6"},{"fixed":"9a8796f06beef1d58d206ecc6d2dc2ddb333498e"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.1.1"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["v3.2-dev.2","v3.1.0","v3.1-rc.4","v3.1-rc.3","v3.2-dev.1","v3.1-rc.2","v3.1-rc.1","v3.1-beta.2","v3.1-beta.1","v3.1-alpha.5","v3.1-alpha.4","v3.1-alpha.3","v3.1-alpha.2","v3.1-alpha.1","v3.0-rc.1","v3.0-beta.7","v3.0-beta.6","v3.0-beta.5","v3.0-beta.4","v3.0-beta.3","v3.0-beta.2","v3.0-beta.1","v3.0-alpha.10","v3.0-alpha.9","v3.0-alpha.8","v3.0-alpha.7","v3.0-alpha.6","v3.0-alpha.5","v3.0-alpha.4","v3.0-alpha.3","v3.0-alpha.2","v3.0-alpha.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33250.json","vanir_signatures_modified":"2026-08-12T15:32:36Z","vanir_signatures":[{"digest":{"line_hashes":["176950745718952962578513946566915388887","163533050068665591142666189019279091535","59078141566895626810274043893642680900","26780643050044632950079218961420445438"],"threshold":0.9},"id":"CVE-2026-33250-2965d049","signature_type":"Line","signature_version":"v1","source":"https://github.com/longturn/freeciv21/commit/9a8796f06beef1d58d206ecc6d2dc2ddb333498e","target":{"file":"common/networking/packets.h"},"deprecated":false},{"id":"CVE-2026-33250-907c1194","signature_type":"Line","signature_version":"v1","source":"https://github.com/longturn/freeciv21/commit/ad8e18ca22595529599782b2984bf44df8d69ed6","target":{"file":"common/networking/packets.cpp"},"deprecated":false,"digest":{"line_hashes":["33293578290326016501507054572433959677","269816716995662171530982480818722424371","140300060392246076799904857442219449983","152308080587707297035468140787653013071","261747669792107267696119433796043380070","297306324485937089796873314828518528839","338788184095469985415832242102532832453","275002003299902787946256767626930596729","63692657311105796734738026476490173923","74437584371346105623909104247447902955","34186098369825343221400744363201753626","288884641656658678637055046597899690746","191509910056740453361654743260799018586","334652294686718209946750484121514567832","321675907509677726908154235444821795877","3947567446502817790356074011328439573","278133839031964716615888639484590850917","17545195357911787417656321187655498562","293417870149835479400399022975848648541","217307997682414814580707686745231885143","327505519771907982733263574987162410232","253283751927868058486128238673521769632","154407413755024018471202259197574308839","279802111576035345940021649941073025966","208177667470433948775912174358245371161","114691444696691270238836857412715639739","266777678982205413264031755754580057429","154423821899662474191500203270710538795","79201410450202488383277650527240988666","44701929295545007825787796538903761107","190046190637949102978542286876596140168","308477187641534915225048070550615674741","76622696084446023207582860791586734060","218212363570418333619682298213867978397","132105220212020086130962205379950096507","263654061684555951951738811314913299409","317709043993099430405156836836933185087","147060492992525396662210855245680562575","260739624738921245335689132648205079809","18709077614994128056093389106729373837","297359725127762203976743244587061695901","328789093106225214607995392446904764442","240159284144289523151737912371692113627","51318335321809266102273166132438999666","55139830485937858510191280546924479021","286526929749343632674524243682907028178","257356540000177450268134095667857454452","183611452861541289972516676618784508115","20399384234155921867861515734624565328","214343692490029045875478837420513468220","313918413087978720302672491800709604477","20985175967256117730725162142580039087","173796533480495507698280214772759683640","194651047194327242172088146412191248708","249415462868908430076162507685768507731","110669815662316197099908950085618905527","321420851591928895459157343979111227196","261436128914404213857387373282176014702","249867940396724153454597852072169958626","324781268532262996181320953184470058737","244748436927257514812749434071681409716","115565276308274320796634846157046012839","277429046163138895013805766023123516193","47942193096033405030943446647090081588","158847599061459994063088568149693586040","323037217210925194022272309989422182215","16946988585049661882055629941418870189","150990654511116577363555115834435483845","6817237721473703158598869633692581157","318335780701730945685454834460440062769","44401594414225608480175904844866040444","299556638479543123488572921908061998493","286968091435378018789203122605598837533","141918692859445886409820161731180987168","307783587709890800495514488775793623564","219235947479731836201875954615361612251","213005913997251383882062412797007962382","274089065832127979420042298478910503154","278187435443313788897188662674097717426","103074909417849045391449842668126377840","149567889939496362890574562254065066659","70671224901813128139949956254752673352","129254633597386821342159576932071049510","36160595464714312187608100456008959423","91276346055989318924672579982967771508","252971426614971735945352434238328763147","195705407739971355240914717960781042769","158321348250699361095872504158022087613","300169191386231897655359897412289897434","77608702290722836428120940763821046406","204038547819676700496644676883073937054","243069725404234646480396014041838048481","234141132183205389248313413924414348860","245603913903272113992155023141633786742"],"threshold":0.9}},{"target":{"function":"get_packet_from_connection_raw","file":"common/networking/packets.cpp"},"deprecated":false,"digest":{"function_hash":"191354267178639079908234560734691745219","length":4659},"id":"CVE-2026-33250-9145c54c","signature_type":"Function","signature_version":"v1","source":"https://github.com/longturn/freeciv21/commit/9a8796f06beef1d58d206ecc6d2dc2ddb333498e"},{"source":"https://github.com/longturn/freeciv21/commit/9a8796f06beef1d58d206ecc6d2dc2ddb333498e","target":{"file":"common/networking/packets.cpp"},"deprecated":false,"digest":{"line_hashes":["269816716995662171530982480818722424371","140300060392246076799904857442219449983","152308080587707297035468140787653013071","261747669792107267696119433796043380070","7831356056681178836703177247969493207","114691444696691270238836857412715639739","266777678982205413264031755754580057429","315094267057618649290315002510695398053","77608702290722836428120940763821046406","204038547819676700496644676883073937054","243069725404234646480396014041838048481","234141132183205389248313413924414348860"],"threshold":0.9},"id":"CVE-2026-33250-ac225619","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/longturn/freeciv21/commit/ad8e18ca22595529599782b2984bf44df8d69ed6","target":{"file":"common/networking/packets.cpp","function":"get_packet_from_connection_raw"},"deprecated":false,"digest":{"function_hash":"325326621537006826921682855208040310723","length":4642},"id":"CVE-2026-33250-cce3e3be","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}