An integer overflow in GameMaker IDE versions prior to 2024.14.0 poses a denial of service risk to projects utilizing the network_create_server function.

This vulnerability is an integer overflow flaw triggered via the network_create_server function, which can be exploited by an unauthenticated attacker to induce an application crash.

The primary business impact of this vulnerability is the disruption of service for applications built using the affected IDE version. With a CVSS score of 7.5, the vulnerability is classified as High, reflecting that it is network-exploitable and does not require user interaction or authentication to trigger a denial of service condition.

Immediate Action: Update GameMaker IDE to version 2024.14.0 or later and recompile all associated project files immediately.

Proactive Monitoring: Monitor network traffic for unusual patterns directed at server instances created via the GameMaker network API and review application crash logs for unexpected termination events.

Compensating Controls: Ensure that network-facing game servers are deployed within isolated network segments to limit the potential reach of unauthorized connection attempts.

Public Exploit Available: Unknown

Given the High severity rating and the ease of exploitation over a network, all developers and organizations utilizing GameMaker IDE must prioritize this update. The requirement to recompile projects after patching is a critical step that should not be overlooked to ensure the fix is correctly implemented across all production environments.