CVE-2025-62170CWE-416

CVE-2025-62170

High · published October 13, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-13T22:15Z
Affected products (1)
ProductVersionsFixed in
rathena/rathena< 2025-10-122025-10-12
References (2)
https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d · [email protected]https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j · [email protected]
EPSS history
Timeline
  • 13 OCT 17:45Z
    rAthena map-server use-after-free vulnerability in RODEX
    cvelistv5