FeloxAC Artifacts

Artifact 17871

Out of support

No known issues, but FiveM no longer supports this build. Plan an update.

Upgrade to 38435
Released
2025-07-31
Support
End of life
Commit
99befdc6f9
FiveM
—

Missing fixes (this build is still exposed)

Security

Server crashes from malformed connection, HTTP and latent-event input

Missing bounds checks in the connection handshake, the HTTP request parser and latent event reassembly could crash the server when it received crafted data. Anyone who can reach the server's port could trigger it. Update to 38435 or newer.

Fixed in 384357892692
Security

One client could freeze the server by flooding game events

Before 37262 there was no core rate limit on netGameEvent packets. A single client could flood events such as weaponDamageEvent until the main thread hung and txAdmin restarted the server. The issue was reported on 35636 and 36727. 37262 drops clients that go over the new 'netGameEvent' rate limiter.

Security

Latent event reassembly is now bounded

The server's reassembly of large client-to-server latent events got hard limits, plus diagnostics for 'latent ACK overflow'. Older builds let a client keep more partial event state than they needed to, which costs memory and CPU.

Fixed in 38004Partly verifiede6d726fddd7084
Security

Better rate limiting for client latent events

Rate limiting of latent (TriggerLatentServerEvent) traffic from clients was tightened in the reassembly packet handler. On older builds a client could push latent event traffic harder than intended.

Fixed in 28871Partly verifiedae540b0
Security

Clients can no longer create multiple player objects

With OneSync, a modified client could register more than one networked player object (CNetObjPlayer) for itself. That is a known abuse path for desync and crashes. Since 23984 the server rejects the extra ones.

Voice

Mumble server network robustness

Oversized or invalid outgoing voice messages used to hit an assertion. They are now dropped cleanly, and the send queue is drained properly. The voice server should be less likely to stall or crash under bad traffic.

Fixed in 38182Partly verifiedbac0347