CVE-2026-24827
Unknown Unknown - Not Provided
Out-of-Bounds Write in Commander-Genius Before Release

Publication date: 2026-01-27

Last updated on: 2026-01-27

Assigner: Government Technology Agency of Singapore Cyber Security Group (GovTech CSG)

Description
Out-of-bounds Write vulnerability in gerstrong Commander-Genius.This issue affects Commander-Genius: before Release refs/pull/358/merge.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-27
Last Modified
2026-01-27
Generated
2026-06-16
AI Q&A
2026-01-27
EPSS Evaluated
2026-06-15
NVD
CVE-2026-24827
EUVD
EUVD-2026-4827
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
gerstrong commander-genius to release (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds write issue in the Commander-Genius project, specifically in cloned Lua source files. It arises from improper handling of stack space during error processing, which was fixed by backporting a critical security patch from the official Lua project. The patch prevents potential exploitation by ensuring safe stack management when errors occur. [1]

Impact Analysis

The vulnerability can lead to an out-of-bounds write, which may cause application crashes or potentially allow an attacker to execute arbitrary code or disrupt the normal operation of the software. This impacts the availability and integrity of the affected system. [1]

Mitigation Strategies

Apply the security patch provided in the Commander-Genius project pull request #379, which backports the critical Lua security fix to the cloned Lua source files `GsKit/base/lua/ldebug.c` and `GsKit/base/lua/lvm.c`. This patch addresses the out-of-bounds write vulnerability by improving stack space handling during error processing. Updating your Commander-Genius installation to include this patch or a later release that contains it is the recommended immediate mitigation step. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24827. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart