Teeworlds · Teeworlds · CVE-2019-10878
**Name of the Vulnerable Software and Affected Versions**
Teeworlds version 0.7.2
**Description**
The issue is related to a failed bounds check in certain functions within the engine/shared/datafile.cpp file, specifically in CDataFileReader::GetData() and CDataFileReader::ReplaceData(), which can lead to an arbitrary free and out-of-bounds pointer write. This could potentially result in remote code execution.
**Recommendations**
For Teeworlds version 0.7.2, consider applying a patch that fixes the bounds check issue in the affected functions, specifically CDataFileReader::GetData() and CDataFileReader::ReplaceData(), to prevent arbitrary free and out-of-bounds pointer write.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.