CVE-2025-58750CWE-119CWE-125CWE-787

CVE-2025-58750

High · published September 10, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in `chclif_parse_moveCharSlot` that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published
2025-09-10T03:15Z
Affected products (1)
ProductVersionsFixed in
rathena/rathena< 2025-09-062025-09-06
References (2)
https://github.com/rathena/rathena/commit/0cc348b186bbcc3c604c17c39589a319f27d469b · [email protected]https://github.com/rathena/rathena/security/advisories/GHSA-pjh7-jgr8-4ff6 · [email protected]
EPSS history
Timeline
  • 09 SEP 22:14Z
    rAthena missing bound check in chclif_parse_moveCharSlot
    cvelistv5