CVE-2026-90557 is a MEDIUM-severity vulnerability affecting Freeciv versions 3.1.0 through 3.2.5. It is an out-of-bounds read issue in the sg_load_player_unit() function when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file to cause a crash or limited heap memory exposure when loaded. The vulnerability has been publicly disclosed and defenders s [truncated]
CVE-2026-90556 is a heap buffer overflow vulnerability in Freeciv versions before 3.2.6. The vulnerability occurs in the worklist_load() function when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. This could potentially allow attackers to craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, c [truncated]
