CVE-2018-1000524: Spheredev Minisphere

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.c that can result in remote denial of service. This attack appear to be exploitable via the victim must load a specially-crafted map which calls SetLayerSize in its entry script. This vulnerability appears to have been fixed in 5.0.3, 5.1.5, 5.2.10 and later.

Affected products

• Spheredev Minisphere: up to and including 5.2.9

Published 2018-06-26. Last modified 2026-06-17.