Critical severity9.8NVD Advisory· Published Feb 22, 2017· Updated Jun 17, 2026

CVE-2016-9400

Description

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Teeworlds/Teeworlds2 versions
cpe:2.3:a:teeworlds:teeworlds:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:teeworlds:teeworlds:*:*:*:*:*:*:*:*range: <0.6.4
- (no CPE)range: <0.6.4
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2016/11/16/8nvdMailing ListPatchThird Party Advisory
www.openwall.com/lists/oss-security/2016/11/17/8nvdMailing ListPatchThird Party Advisory
github.com/teeworlds/teeworlds/commit/ff254722a2683867fcb3e67569ffd36226c4bc62nvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/94381nvdThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/201705-13nvdThird Party Advisory
www.teeworlds.comnvdVendor Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C4JNSBXXPE7O32ZMFK7D7YL6EKLG7PRV/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000