{"affected":[{"defaultStatus":"unaffected","product":"Don't Starve Together","source":"CNA: VulnCheck","vendor":"Klei Entertainment","versions":[{"lessThanOrEqual":"747465","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-58458","cwes":["CWE-787"],"description":"Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the native persistent-string decoder that allows a remote attacker operating a public dedicated server to crash a victim's game client by publishing crafted world_gen_data with an invalid Klei persistent blob header length. Attackers can craft a malicious public lobby server listing that, once viewed or selected by the victim, triggers client-side decoding of the attacker-controlled data to corrupt native memory and cause a remote denial of service.","epss":{"date":"2026-11-02","percentile":0.15855,"score":0.00246},"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":6.5,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793651028946,"publishedAt":1793207857710,"references":[{"source":"CNA: VulnCheck","tags":["release-notes","patch"],"url":"https://kleiforums.com/game-updates/dst/"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/don-t-starve-together-memory-corruption-via-world-gen-data"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://kleiforums.com/game-updates/dst/"}],"revision":"6c77c317fee234b69f774d7a358aa7fa139d5fc4a6f7ea3dc5df1ca59237a295","sources":[{"modifiedAt":1793651028946,"name":"CNA: VulnCheck","retrievedAt":1793653815541,"url":"https://www.cve.org/CVERecord?id=CVE-2026-58458"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793653841672,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-58458"}],"ssvc":{"assessedAt":1793651019062,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Don't Starve Together Memory Corruption via world_gen_data","updatedAt":1793653841672}