CVE-2006-1101: Sauerbraten Cube

Medium severity, CVSS 5.0. EPSS: 5.1% chance of exploitation in the next 30 days.

The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.

Affected products

• Sauerbraten Cube: version 2005-08-09 only
• Sauerbraten Sauerbraten: version 2006-02-28 only

Published 2006-03-09. Last modified 2026-06-16.