CVE-2026-90556 freeciv CVE debrief

Who should care

Defenders responsible for Freeciv deployments, especially those loading savegame files from untrusted sources, should assess exposure and prioritize verification and remediation. This includes reviewing current versions, checking for exposure, and updating to version 3.2.6 or later. Additionally, defenders should consider implementing compensating controls, such as restricting savegame file loading from untrusted sources and monitoring for potential memory

Why it matters

CVE-2026-90556 is a heap buffer overflow vulnerability in Freeciv that could allow attackers to craft malicious savegame files, potentially corrupting memory. Defenders should prioritize verifying and updating Freeciv, especially in environments loading savegame files from untrusted sources.

• Potential memory corruption when loading malicious savegame files
• Possible denial of service or arbitrary code execution
• Need for verification of affected versions and exposure
• Priority for updating to version 3.2.6 or later

Technical summary

The vulnerability occurs in the worklist_load() function when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. This could potentially allow attackers to craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, corrupting memory when a user or server operator loads the file. The vulnerability affects Freeciv versions before 3.2.6 and requires verification of affected versions and exposure. Defenders should prioritize verifying and updating Freeciv, especially in environments loading savegame files from untrusted sources.

Defensive priority

Defenders should prioritize verifying and updating Freeciv to version 3.2.6 or later, especially in environments where savegame files are loaded from untrusted sources.

Recommended defensive actions

• Verify and update Freeciv to version 3.2.6 or later
• Review and restrict savegame file loading from untrusted sources
• Monitor for and respond to potential memory corruption issues
• Perform vulnerability scanning to identify exposed Freeciv deployments
• Implement additional logging and monitoring for savegame file loading
• Review access controls for savegame file loading
• Conduct a thorough risk assessment for Freeciv usage in the environment

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, including its description and CVSS score. However, the exact versions affected and the specific impacts require verification from the official Freeciv sources.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.