Markus Koschany

**Name of the Vulnerable Software and Affected Versions** Game Music Emu library version 0.6.1 **Description** The issue is related to the Mem File Reader::read avail function in Data Reader.cpp, which does not ensure a non-negative size. This allows remote attackers to cause a denial of service, resulting in an application crash, via a crafted file. **Recommendations** For Game Music Emu library version 0.6.1, ensure that the Mem File Reader::read avail function validates the size to prevent negative values, or update to a version where this issue is fixed if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Teeworlds versions 0.6.0 through 0.6.2 **Description** The issue allows remote attackers to read memory and cause a denial of service, resulting in a crash. The exact vectors used for the attack are not specified. **Recommendations** For versions 0.6.0 through 0.6.2, update to version 0.6.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ioquake3 versions prior to r1762 OpenArena (affected versions not specified) Tremulous (affected versions not specified) **Description** The issue allows remote attackers to cause a denial of service, specifically network traffic amplification, by sending spoofed requests. This can be achieved through either a getstatus or rcon request. **Recommendations** For ioquake3 versions prior to r1762, update to version r1762 or later. For OpenArena, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Tremulous, at the moment, there is no information about a newer version that contains a fix for this vulnerability.