CVE-2026-116841 | diasurgical DevilutionX up to 1.5.5 libmpq libmpq__file_number_from_hash block_table_index out-of-bounds

October 27, 2026 Yanac

A vulnerability labeled as problematic has been found in diasurgical DevilutionX up to 1.5.5. This issue affects the function libmpq__file_number_from_hash of the component libmpq. Executing a manipulation of the argument block_table_index can lead to out-of-bounds read.

The identification of this vulnerability is CVE-2026-116841. The attack can only be executed locally. There is no exploit available.VulDB Recent EntriesRead More