rAthena Out-of-Bounds Read and Write Vulnerability in Character Movement Slot Parsing

A vulnerability allowing out-of-bounds reading and writing has been identified in rAthena, an open-source MMORPG server. This issue affects versions prior to commit 0cc348b and arises from a missing bounds check in the 'chclif_parse_moveCharSlot' function. The vulnerability can be exploited using user-provided input, leading to potential memory corruption.

Impact

Exploitation of this vulnerability allows for out-of-bounds memory access, which can commonly lead to memory corruption or arbitrary code execution.

Remediation

Users can upgrade to rAthena commit 0cc348b or apply the changes from this commit manually to address the vulnerability.