VULNERABILITY INTELLIGENCE

CVE-2026-47235

CVSS score7.5 HIGH

EPSS probability0.62%

CISA KEVNot currently listed

Published2026-10-28

Last modified2026-10-29

Description

SimulationCraft is a tool to explore combat mechanics in World of Warcraft. In builds after release-820-01 and before the identified May 7, 2026 nightly, the `bcp_api.cpp` loop over the JSON `sockets` array uses `slot_data["sockets"].Size()` without bounding `gem_idx` by `MAX_GEM_SLOTS`, which is fo…