{"id":"CVE-2026-58458","title":"Don't Starve Together Memory Corruption via world_gen_data","summary":"Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-787"],"vendor":"Klei Entertainment","product":"Don't Starve Together","affected":["don_t_starve_together <= 747465"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-02T20:23:39.062139Z"},"published":"2026-10-28","updated":"2026-11-02","sourceUpdated":"2026-11-02T20:23:48.946Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-58458","references":[{"url":"https://kleiforums.com/game-updates/dst/","label":"Release Notes"},{"url":"https://www.vulncheck.com/advisories/don-t-starve-together-memory-corruption-via-world-gen-data","label":"VulnCheck Advisory: Don't Starve Together Memory Corruption via world_gen_data"}],"tags":["cve.org"],"epss":0.00246,"epssPercentile":0.15894,"ingestedAt":"2026-10-28T18:15:46.396Z","slug":"CVE-2026-58458","body":"## Overview\n\nDon't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted world_gen_data with an invalid Klei persistent blob header length. Attackers can craft a malicious public lobby server listing that, once viewed or selected by the victim, triggers client-side decoding of the attacker-controlled data to corrupt native memory and cause a remote denial of service.\n\n## Affected\n\n- `don_t_starve_together <= 747465`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}