OpenTTD is a single-product, open-source game engine that recreates and extends the classic Transport Tycoon simulation, commanding a dedicated player and modding community that elevates its prominence within the niche gaming and simulation software landscape. Its vulnerability profile concentrates narrowly on the core game engine and tends toward parser and memory-handling weaknesses—including buffer boundary violations, input validation gaps, and code-injection vectors—that are typical of game engines processing untrusted map data, scripts, and network traffic. The vendor's disclosures frequently acquire public exploit demonstrations, reflecting both the open-source development model and the appeal of a networked game engine to researchers and tool developers. Defenders deploying OpenTTD in networked or multiplayer contexts should treat input validation and memory-safety flaws as operational concerns; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Openttd over time
Signals from CVEs in this vendor scope (20 CVEs).
20 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-1999MEDIUM The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main me | Apr 25, 2006 | 5.0 | 30 | NO | YES |
CVE-2008-3576HIGH Buffer overflow in the TruncateString function in src/gfx.cpp in OpenTTD before 0.6.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitr | Aug 10, 2008 | 10.0 | 27 | NO | NO |
CVE-2011-3342HIGH Multiple buffer overflows in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors related to (1) N | Sep 8, 2011 | 7.5 | 26 | NO | NO |
CVE-2010-4168HIGH Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow (1) remote attackers to cause a denial of service (invalid write and daemon crash) by abruptly disconnec | Nov 17, 2010 | 7.5 | 26 | NO | NO |
CVE-2011-3341HIGH Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a craf | Sep 8, 2011 | 7.5 | 25 | NO | NO |
CVE-2008-3547HIGH Buffer overflow in the server in OpenTTD 0.6.1 and earlier allows remote authenticated users to cause a denial of service (persistent game disruption) or possibly execute arbitrary | Mar 10, 2009 | 9.0 | 24 | NO | NO |
CVE-2010-0402MEDIUM OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execu | May 5, 2010 | 6.5 | 22 | NO | NO |
CVE-2010-0401MEDIUM OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended acce | May 5, 2010 | 6.5 | 22 | NO | NO |
CVE-2005-2764HIGH Multiple buffer overflows in OpenTTD before 0.4.0.1 allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. | Sep 21, 2005 | 7.5 | 22 | NO | NO |
CVE-2012-3436MEDIUM OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and serv | Oct 9, 2012 | 5.0 | 20 | NO | NO |
Signals from CVEs in this vendor scope (20 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Openttd.
Media articles that mention a CVE ID that affects a product developed by Openttd — matched by CVE ID, not by vendor name.