Respawn does not believe there are “more serious risks” to players in the Titanfall 2 security vulnerability

[ad_1]

Respawn Entertainment is “aware of reports” and “investigates” a possible security vulnerability in Titanfall 2, the company announced today. The wording of the announcement neither confirms nor denies the violation. Respawn has “no other information to share at the moment,” according to the tweet, but will update fans if new information comes out.

Twitter’s statement comes hours after a user claimed Titanfall 2’s servers were compromised. The warning originated from the NoSkill Discord community, a dedicated server to a Titanfall modding community, and states that “there are reports of a bug in the game that allows local code to be run from the server”. This “could leave both your computer and your console vulnerable to exploits,” they wrote.

We are aware of reports of a security vulnerability affecting Titanfall 2 and are investigating. We have no other information to share at the moment, but we will update once we do.

– Respawn (@Respawn) September 8, 2021

One user has clarified the explanation on NoSkill Discord, with details on how it could happen and its potential (and harmful) ramifications.

“The temporary buffer that Titanfall uses for game invitations has a size limit,” they wrote. “If the decrypted username of the person who invited you is larger than that maximum size, it will start overwriting the random memory to store the name. Once it gets out of that specific temporary buffer, however, your PC starts treating it as executable code rather than username. And because it’s directly on your computer, it could potentially run any program, including malware, on your computer.

According to another user, the cause of the vulnerability is an “invalid lobby invitation” sent to members of Advocate Network, Titanfall 2’s default network, to crash their games with a buffer overflow. These overflows “can lead to arbitrary code execution,” the user wrote.

While the vulnerability may have security implications, it is difficult to find reports of users being actively compromised or harmed by the problem at the time of writing. However, hackers could potentially exploit the breach over time.

Respawn is investigating the issue and fans should wait for official announcements, particularly on Twitter, to find out more.

Update 21:57 CT: The company is still investigating, but Respawn’s engineers believe it is “a simple exploit that can be used to block games” and “they don’t believe there are more serious risks to affected players or their players. machines, “according to an announcement. We have updated the title accordingly.

[ad_2]