CVE-2025-58750

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-58750
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58750.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-58750
Aliases
  • GHSA-pjh7-jgr8-4ff6
Published
2025-09-09T22:14:40.265Z
Modified
2026-04-12T18:40:01.216963Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
Summary
rAthena missing bound check in chclif_parse_moveCharSlot
Details

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in chclif_parse_moveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.

Database specific 
{
    "cwe_ids": [
        "CWE-119",
        "CWE-125",
        "CWE-787"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58750.json"
}
References

Affected packages

Git / github.com/rathena/rathena

Affected ranges

Type
GIT
Repo
https://github.com/rathena/rathena
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0cc348b186bbcc3c604c17c39589a319f27d469b

Database specific

vanir_signatures_modified 
"2026-04-12T18:40:01Z"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2025-09-06"
            }
        ]
    }
]
vanir_signatures 
[
    {
        "source": "https://github.com/rathena/rathena/commit/0cc348b186bbcc3c604c17c39589a319f27d469b",
        "target": {
            "file": "src/char/char_clif.cpp"
        },
        "id": "CVE-2025-58750-c2283d45",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "165777399889884881147969569937301427469",
                "258688393489924538890180919724884425602",
                "265994473809284424027394669799542495123",
                "198110130763466511088914611925501947195",
                "93749949891332875889138952780003326112",
                "251261960262745273404512782040366018311",
                "334663161906053048358210666199583992503",
                "23150337488579042476199014139286748316",
                "332804540709518626043506439996398477315"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://github.com/rathena/rathena/commit/0cc348b186bbcc3c604c17c39589a319f27d469b",
        "target": {
            "function": "chclif_parse_moveCharSlot",
            "file": "src/char/char_clif.cpp"
        },
        "id": "CVE-2025-58750-f7ba005a",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "digest": {
            "function_hash": "121129272681649003930422489341943610339",
            "length": 1855.0
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58750.json"