CVE-2026-116841
DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup
CVSS Score
5.5
EPSS Score
0.0%
EPSS Percentile
0th
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
| CWE | CWE-125 |
| Vendor | diasurgical |
| Product | devilutionx |
| Published | Oct 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for diasurgical devilutionx
Be the first to know when new medium vulnerabilities affecting diasurgical devilutionx are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
diasurgical / DevilutionX
1.4.0 ≤ 1.5.5
References
github.com: https://github.com/diasurgical/DevilutionX/issues/8758 github.com: https://github.com/diasurgical/DevilutionX/pull/8482 github.com: https://github.com/diasurgical/libmpq/blob/b78d66c6fee6a501cc9b95d8556a129c68841b05/libmpq/mpq.c#L740 github.com: https://github.com/diasurgical/DevilutionX/blob/7223eeac9e8274fbf665b4de86fda26d3b22c52f/3rdParty/libmpq/CMakeLists.txt hackmd.io: https://hackmd.io/@haindpwn/devilutionx-libmpq-hash-block-table-oob vulncheck.com: https://www.vulncheck.com/advisories/devilutionx-1.4.0-through-1.5.5-out-of-bounds-read-via-libmpq-hash-table-lookup
Credits
HaiND from the Post and Telecommunication Institute of Technology