CVE-2013-6411: Openttd

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.

Affected products

• Openttd Openttd: version 0.3.6 only; version 0.4.0 only; version 0.4.0.1 only; version 0.4.5 only; version 0.4.6 only; version 0.4.7 only; …

Published 2013-12-14. Last modified 2026-06-17.