CVE-2022-24126: Fromsoftware Dark Souls Iii

Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days.

A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a different vulnerability than CVE-2021-34170.

Affected products

• Fromsoftware Dark Souls Iii: up to and including 2022-03-19

Published 2022-03-20. Last modified 2026-06-17.