CVE-2021-43518

Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.

• CWE-120

• https://github.com/teeworlds/teeworlds/issues/2981Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/
• https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/Exploit, Third Party Advisory
• https://github.com/teeworlds/teeworlds/issues/2981Exploit, Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/
• https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/Exploit, Third Party Advisory

Published

Dec 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43509SQL Injection vulnerability exists in Sourcecodester Simple …9.8
• CVE-2021-4351The Frontend File Manager plugin for WordPress is vulnerable…5.3
• CVE-2021-43510SQL Injection vulnerability exists in Sourcecodester Simple …9.8
• CVE-2021-43512An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8…5.5
• CVE-2021-43515CSV Injection (aka Excel Macro Injection or Formula Injectio…7.8
• CVE-2021-43517FOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012…9.8
• CVE-2021-43519Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1…5.5
• CVE-2021-4352The JobSearch WP Job Board plugin for WordPress is vulnerabl…5.3
• CVE-2021-43521A Buffer Overflow vulnerability exists in zlog 1.2.15 via zl…7.5
• CVE-2021-43522An issue was discovered in Insyde InsydeH2O with kernel 5.1 …7.5
• CVE-2021-43523In uClibc and uClibc-ng before 1.0.39, incorrect handling of…9.6
• CVE-2021-43527NSS (Network Security Services) versions prior to 3.73 or 3.…9.8