CVE-2006-6227: Neoengine

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service (engine crash) via a message with a large uiMessageLength that produces a failed memory allocation and a null pointer dereference.

Affected products

• Neoengine Neoengine: version 0.8.2 only

Published 2006-12-02. Last modified 2026-06-16.