Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted packet.