CVE-2026-90556 | Freeciv up to 3.2.5 Worklist worklist_load heap-based overflow

September 12, 2026 Yanac

A vulnerability marked as problematic has been reported in Freeciv up to 3.2.5. This affects the function worklist_load of the component Worklist. The manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-90556. An attack has to be approached locally. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More