Changes

!  Status

!  Status

!  Description

!  Description

|}

|}

|  Dark Void Zero

|  Dark Void Zero

| High-Scores

| High-Scores

| No limit on length of drawn record names, no vuln with high-scores. The level var from savedata doesn't have any bounds check, this is used with array indexes. This is not exploitable since the array structs only contain char* strings and other fields.

| No limit on length of drawn record names, no vuln with high-scores. The level var from savedata doesn't have any bounds check, this is used with array indexes. This is not exploitable since the array structs only contain char* strings and other fields, and that var is used with level class init. Level class init fail is most likely the cause of the crash which isn't exploitable, level paths are determined by if statements and the level object is used uninitialized when the level var is out-of-bounds.

|-

|-

|  Dracula

|  Dracula

|  None

|  None

|  No high-scores or string input.

|  No high-scores or string input.

|}

|}