CyberRota Analysis
AI-GeneratedThe QTI Neon relay-based UDP multiplayer protocol library is vulnerable due to improper handling of RECONNECT_REQUEST packets, allowing unauthenticated clients to exploit this weakness and launch amplification attacks that can lead to denial of service on the host. Organizations utilizing version 1.0.0 of this library should prioritize remediation efforts, as there is currently no fixed version available to address this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
QTI Neon is a minimal, game-agnostic, relay-based UDP multiplayer protocol library. In version 1.0.0, the relay's handleReconnectRequest forwards RECONNECT_REQUEST packets to the host without bounding them, so an unauthenticated client can drive relay-to-host amplification and cause a denial of service on the host. No fixed version is available as of this review.