icculus CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM icculus CVE published 2026-10-14

CVE-2024-58392

PhysicsFS through 3.2.0 is vulnerable to an out-of-bounds read in the __PHYSFS_utf8codepoint() function. This vulnerability allows attackers to read past name buffers via crafted archive entry names, potentially causing application crashes and information disclosure. Defenders should verify affected versions, assess exposure, and prioritize patching and monitoring. The CVE record was published on 2026-10- [truncated]