PT-2026-4895 · Turanszkij · Wickedengine

Titan Team · Published 2026-01-27 · Updated 2026-01-27 · CVE-2026-24820

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions turanszkij WickedEngine versions prior to 0.71.705

Description An out-of-bounds read issue exists in turanszkij WickedEngine, specifically within the LUA modules and associated with the ldebug.C program file.

Recommendations Update turanszkij WickedEngine to version 0.71.705 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-24820

Affected Products

Wickedengine

References · 5

• https://github.com/turanszkij/WickedEngine/pull/1054 · Patch
• https://osv.dev/vulnerability/CVE-2026-24820 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-24820 · Security Note
• https://t.me/CVEtracker/43046 · Telegram Post
• https://twitter.com/CVEnew/status/2016081234032542042 · Twitter Post