A buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allows remote attackers to execute arbitrary code via matchmaking servers, a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
RCE
Buffer Overflow
Memory Corruption
Dark Souls Iii
Fromsoftware
NVD
GitHub
CVSS 3.1
9.8
EPSS
4.4%