2K Games Civilization V Lua Sandbox loadstring type confusion
Impact
A type confusion vulnerability in 2K Games Civilization V 1.0.3.144's Lua Sandbox loadstring function may be exploited from remote. The impact is uncertain. The vendor has not responded to disclosure.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
2K Games · VulDB
Civilization V
1 range
2K Games · VulDB
Civilization V
Compare with this publisher’s ranges. This does not inspect your installation.
affected
1.0.3.144
Other versions: unknown
Product identifiers (CPE)
cpe:2.3:a:2k_games:civilization_v:*:*:*:*:*:*:*:*Original source description
A vulnerability was determined in 2K Games Civilization V 1.0.3.144. Impacted is the function loadstring of the component Lua Sandbox. Executing a manipulation can lead to type confusion. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-116111View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.