CVE-2025-58750

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-58750

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58750.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-58750

Aliases

GHSA-pjh7-jgr8-4ff6

Published

2025-09-09T22:14:40Z

Modified

2026-08-12T15:14:11Z

Severity

8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator

Summary

rAthena missing bound check in chclif_parse_moveCharSlot

Details

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0cc348b are missing a bound check in chclif_parse_moveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed in commit 0cc348b.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-119",
        "CWE-125",
        "CWE-787"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58750.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "fixed":  "0cc348b"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/rathena/rathena

Affected ranges

Type

GIT

Repo

https://github.com/rathena/rathena

Events

Introduced

Fixed

0cc348b186bbcc3c604c17c39589a319f27d469b

Database specific

Show details

{
    "source":  "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58750.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "165777399889884881147969569937301427469",
                "258688393489924538890180919724884425602",
                "265994473809284424027394669799542495123",
                "198110130763466511088914611925501947195",
                "93749949891332875889138952780003326112",
                "251261960262745273404512782040366018311",
                "334663161906053048358210666199583992503",
                "23150337488579042476199014139286748316",
                "332804540709518626043506439996398477315"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2025-58750-c2283d45",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/rathena/rathena/commit/0cc348b186bbcc3c604c17c39589a319f27d469b",
        "target":  {
            "file":  "src/char/char_clif.cpp"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "121129272681649003930422489341943610339",
            "length":  1855
        },
        "id":  "CVE-2025-58750-f7ba005a",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/rathena/rathena/commit/0cc348b186bbcc3c604c17c39589a319f27d469b",
        "target":  {
            "file":  "src/char/char_clif.cpp",
            "function":  "chclif_parse_moveCharSlot"
        }
    }
]

vanir_signatures_modified

"2026-08-12T15:14:11Z"