Untitled Goose Game Has a Critical Vulnerability

Pulse Security consultant Denis Anzakovich discovered a critical vulnerability in the popular Untitled Goose Game. According to Andzakovich, the problem allows to introduce malicious code into the game and launch it without the knowledge of users.

Untitled Goose Game Has a Critical Vulnerability

The vulnerability exists because of insecure deserialisation in the downloader of the saved game. An intruder who controls a saved game can exploit malicious code when it is loaded.

According to Andzakovich, he sent a vulnerability notification to the game’s developer on October 7th, and on October 22nd House announced the release of the patch. Users are strongly advised to install an update to avoid potential cyberattacks.

Australian developer House House released Untitled Goose Game on September 20 this year, and the game began to gain popularity – in the first two weeks alone, more than 100,000 copies were sold.

Protect yourself from cybercrimes and keep your data safe – use RusVPN on your devices now!