CVE-2023-24288
Received Received - Intake

Denial of Service in Portable Puzzle Collection

Vulnerability report for CVE-2023-24288, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description

An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Denial of Service (DoS) issue in Portable Puzzle Collection before version 20230116.5782e29. It allows attackers to cause a system disruption by creating an excessive number of save states, which consumes system resources and leads to service unavailability.

Detection Guidance

This vulnerability is specific to Portable Puzzle Collection and involves excessive save states causing a DoS. Detection would require checking for unusual save state file creation in the application's data directory. Monitor for rapid file growth in the save state folder or unusual process behavior.

Impact Analysis

The vulnerability can impact you by making the Portable Puzzle Collection application unresponsive or crashing, leading to loss of unsaved progress. It may also slow down or freeze your system if too many save states are created simultaneously.

Compliance Impact

This vulnerability causes a Denial of Service (DoS) via excessive save states, which may impact system availability. Compliance with standards like GDPR or HIPAA typically requires maintaining system availability and integrity, so a DoS could potentially affect compliance by disrupting access to data or services.

Mitigation Strategies

Update Portable Puzzle Collection to version 20230116.5782e29 or later to address the DoS vulnerability caused by excessive save states.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-24288. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart