CVE-2024-39840
Severity:
HIGH
Type:
CWE-787
Out-of-bounds Write
Publication date:
29/06/2024
Last modified:
03/07/2024
Description
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects.
Impact
Base Score 3.x
8.80
Severity 3.x
HIGH