CVE-2021-40589: Zangband-Data Project Zangband-Data

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits.

Affected products

• Zangband-Data Project Zangband-Data: version 2.7.5 only

Published 2022-06-08. Last modified 2026-06-17.