CVE-2025-58447

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-58447

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58447.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-58447

Aliases

GHSA-4p33-6xqr-cm6x

Published

2025-09-09T22:11:03.376Z

Modified

2025-12-05T10:20:50.195331Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

rAthena has heap-based buffer overflow in login server

Details

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CA_SSO_LOGIN_REQ with an oversized token length. This leads to immediate denial of service (crash) and it is possible to achieve remote code execution via heap corruption. Commit 2f5248b fixes the issue.

Database specific

{
    "cwe_ids": [
        "CWE-122"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58447.json"
}

References

Affected packages

Git / github.com/rathena/rathena

Affected ranges

Type: GIT
Repo: https://github.com/rathena/rathena
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

2f5248b9cd9a8c6b42422ddecfc4cc2cd0e69e4b

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58447.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "301469459589491380462600020940278387632",
                "100118674506182665544821448511249522469",
                "316118351100221714783085151324964126564",
                "291141367328178332968123274634032556917"
            ]
        },
        "signature_type": "Line",
        "target": {
            "file": "src/login/loginclif.cpp"
        },
        "source": "https://github.com/rathena/rathena/commit/2f5248b9cd9a8c6b42422ddecfc4cc2cd0e69e4b",
        "id": "CVE-2025-58447-b85679ff",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "121707411016889437678516243908855743161",
            "length": 796.0
        },
        "signature_type": "Function",
        "target": {
            "file": "src/login/loginclif.cpp",
            "function": "logclif_parse_reqauth_sso"
        },
        "source": "https://github.com/rathena/rathena/commit/2f5248b9cd9a8c6b42422ddecfc4cc2cd0e69e4b",
        "id": "CVE-2025-58447-f444da85",
        "signature_version": "v1"
    }
]