FeloxAC Artifacts

Artifact 38004

OK

No issues reported and still inside FiveM support. Safe to run.

Upgrade to 38435
Released
2026-10-28
Support
Supported until 2026-11-11
Commit
6381a41391
FiveM
—

Fixed in this build

Security

Latent event reassembly is now bounded

The server's reassembly of large client-to-server latent events got hard limits, plus diagnostics for 'latent ACK overflow'. Older builds let a client keep more partial event state than they needed to, which costs memory and CPU.

Partly verifiede6d726fddd7084
Network

Network-thread hitches and mass timeouts under reliable-queue pressure

On recent recommended builds, servers saw network and sync thread hitches and mass 'Timed out after 60 seconds' disconnects (GitHub #4244). 38004 bundles several fixes: ENet stops scanning the reliable queue when the window is full, latent event fragments go out as unreliable fragments, and the sync code keeps frames based on client silence. One user still reported timeouts on 38004, and 38164 adds a related backlog fix.

Missing fixes (this build is still exposed)

Security

Server crashes from malformed connection, HTTP and latent-event input

Missing bounds checks in the connection handshake, the HTTP request parser and latent event reassembly could crash the server when it received crafted data. Anyone who can reach the server's port could trigger it. Update to 38435 or newer.

Fixed in 384357892692
Voice

Mumble server network robustness

Oversized or invalid outgoing voice messages used to hit an assertion. They are now dropped cleanly, and the send queue is drained properly. The voice server should be less likely to stall or crash under bad traffic.

Fixed in 38182Partly verifiedbac0347