CVE-2023-24287

What it actually does

A crafted save file triggers a buffer overrun in the Undead puzzle handling logic, resulting in memory corruption that may enable arbitrary code execution or application crashes.

Why it matters to the business

Processing untrusted save files in affected applications can lead to crashes, data corruption, or full system compromise, increasing risk for any software that loads external puzzle data.

How an attack unfolds

An attacker crafts a malicious save file that overflows the buffer during Undead puzzle parsing. The file is delivered to a victim who loads it in the vulnerable application, causing the overflow to corrupt memory and potentially execute attacker-supplied code.

How to fix it

Apply vendor patches for the buffer handling code as they become available. Implement strict bounds checking and input sanitization on all save file parsing routines. Consider sandboxing or isolating file processing components.

How to confirm the fix worked

Test save file loading with both benign and oversized crafted inputs to confirm absence of overflows. Monitor application logs for crashes during puzzle deserialization after applying fixes.

Typical attack path

1. Craft a malicious save file containing oversized puzzle data
2. Deliver the file via email, download, or shared storage
3. Victim opens the file in the vulnerable application
4. Buffer overrun occurs during puzzle deserialization
5. Memory corruption leads to code execution or denial of service

How to detect it

Review application logs for crashes or errors during save file parsing of puzzle data. Monitor file system activity for unexpected save files being loaded from untrusted sources.

What your security team should do

• Prioritize patching once fixed versions are released due to the buffer overflow class
• Restrict loading of untrusted save files until mitigation is in place
• Add runtime protections such as ASLR and stack canaries if not already enabled
• Update detection rules to flag anomalous puzzle save file sizes