CVE-2025-34124— Heroes of Might and Magic III .h3m Map File Buffer Overflow
Quick assessment
Affected
The 3DO Company Heroes of Might and Magic III
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ubisoft Entertainment Heroes of Might and Magic III Complete等都是法国Ubisoft Entertainment公司的一款回合制策略魔幻游戏。 Ubisoft Entertainment多款产品存在安全漏洞，该漏洞源于缓冲区溢出，可能导致执行任意代码。以下产品及版本受到影响：Heroes of Might and Magic III Complete 4.0.0.0版本、HD Mod 3.808 build 9版本和Demo 1.0.0.0版本。
Public Exploits 1
Metasploit · 1
homm3_h3m.rb [exploit]
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-34124
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Heroes of Might and Magic III .h3m Map File Buffer Overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading when a crafted object name causes a buffer overflow, potentially allowing arbitrary code execution. Exploitation requires the victim to open a malicious map file within the game.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Ubisoft Entertainment多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ubisoft Entertainment Heroes of Might and Magic III Complete等都是法国Ubisoft Entertainment公司的一款回合制策略魔幻游戏。 Ubisoft Entertainment多款产品存在安全漏洞，该漏洞源于缓冲区溢出，可能导致执行任意代码。以下产品及版本受到影响：Heroes of Might and Magic III Complete 4.0.0.0版本、HD Mod 3.808 build 9版本和Demo 1.0.0.0版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| The 3DO Company | Heroes of Might and Magic III | Complete 4.0.0.0 | - |
|
II. Public POCs for CVE-2025-34124
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-34124
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-121
-
CVE-2026-78010
Fireware OS Stack-Based Buffer Overflow in iked Allows Unaut -
CVE-2026-19318
Fireware OS Pre-Authentication Stack Buffer Overflow in iked -
CVE-2026-13086
Fireware OS Stack-Based Buffer Overflow in Mobile Security e -
CVE-2026-67560
Stack-based Buffer Overflow in Bendix EC80 Brake ECU -
CVE-2026-21807
HCL BigFix Quantum Risk Analyzer is affected by a stack-base
V. Comments for CVE-2025-34124
No comments yet