Ravenfield
Monthly
Risk signals are moderate but notably conflicting: the published CVSS 4.0 score is 5.3, while the independent CVSS 3.1 assessment is 8.8 because successful exploitation can produce high confidentiality, integrity, and availability impact. Deserialization in SteelRaven7 Ravenfield's RFL/RFLD custom map handler (cacheCoverPoints) allows unauthenticated remote attackers to execute code when a player loads an attacker-supplied custom map, with user interaction required. A vendor patch named 'EA39 Security Patch' is available, a public technical writeup is referenced but working exploit code is not confirmed by the provided data, and KEV status is not indicated; the vuln.today decision label is this_month.
Risk signals are moderate but notably conflicting: the published CVSS 4.0 score is 5.3, while the independent CVSS 3.1 assessment is 8.8 because successful exploitation can produce high confidentiality, integrity, and availability impact. Deserialization in SteelRaven7 Ravenfield's RFL/RFLD custom map handler (cacheCoverPoints) allows unauthenticated remote attackers to execute code when a player loads an attacker-supplied custom map, with user interaction required. A vendor patch named 'EA39 Security Patch' is available, a public technical writeup is referenced but working exploit code is not confirmed by the provided data, and KEV status is not indicated; the vuln.today decision label is this_month.