Skip to content

fix(gta-core-five): gfx set to image exploit#3953

Draft
DaniGP17 wants to merge 1 commit into
citizenfx:masterfrom
DaniGP17:fix/gfx-image-exploit
Draft

fix(gta-core-five): gfx set to image exploit#3953
DaniGP17 wants to merge 1 commit into
citizenfx:masterfrom
DaniGP17:fix/gfx-image-exploit

Conversation

@DaniGP17
Copy link
Copy Markdown
Contributor

@DaniGP17 DaniGP17 commented Apr 28, 2026

Goal of this PR

Fix a crash exploit. Somehow they made ImageInfo nullptr.

Also I'll try to check tomorrow how they could be doing this, because it may crash in other place.

How is this PR achieving the goal

Validating Image and ImageInfo.

This PR applies to the following area(s)

FiveM

Successfully tested on

Game builds: 3258
Platforms: Windows

Checklist

  • Code compiles and has been tested successfully.
  • Code explains itself well and/or is documented.
  • My commit message explains what the changes do and what they are for.
  • No extra compilation warnings are added by these changes.

Fixes issues

fixes #3952

@github-actions github-actions Bot added the invalid Requires changes before it's considered valid and can be (re)triaged label Apr 28, 2026
@florijanftw
Copy link
Copy Markdown

Is there any code we can deploy to fix it right now ?

@xalva98
Copy link
Copy Markdown

xalva98 commented Apr 29, 2026

I think you could blacklist all train models, not sure if that works though

@DaniGP17 DaniGP17 marked this pull request as draft April 29, 2026 11:10
@divocbn divocbn mentioned this pull request May 10, 2026
@divocbn divocbn mentioned this pull request May 21, 2026
@Pedro-Lucas14
Copy link
Copy Markdown

@prikolium-cfx @radium-cfx Is there any estimate for when these fixes will be available on all FiveM versions? Currently, many cheaters are causing server crashes and abusing these exploits.

I would also like to ask you to take a look at this fix that @divocbn sent regarding Passive Mode abuse:

[GTA:O] [CFX] Passive Mode + Fix
https://www.youtube.com/watch?v=IXXxhkDEt6A

Many cheaters are using this function to become immortal and ruin the gameplay experience on servers.

And also this other fix:

[GTA:O] [CFX] Susano's New Vehicle Hijack Fix
https://www.youtube.com/watch?v=AVMPGVLQx5s

This exploit is being heavily abused to remove players from their own vehicles and create loops in certain areas, disrupting multiple players at the same time and causing server instability.

@florijanftw
Copy link
Copy Markdown

florijanftw commented May 27, 2026 via email

@goiabadu
Copy link
Copy Markdown

@prikolium-cfx @radium-cfx Do you have any timeline or ETA for these protections to be rolled out across all FiveM builds? At the moment, several exploit methods are being widely abused by cheaters to crash servers and negatively impact gameplay stability.

I’d also like to bring attention to this Passive Mode related fix shared by @divocbn:

[GTA:O] [CFX] Passive Mode + Fix
https://www.youtube.com/watch?v=IXXxhkDEt6A

This exploit is currently being used by cheaters to gain invincibility and abuse gameplay mechanics on multiple servers.

Additionally, please take a look at this vehicle hijack fix:

[GTA:O] [CFX] Susano's New Vehicle Hijack Fix
https://www.youtube.com/watch?v=AVMPGVLQx5s

This exploit is being heavily exploited to force players out of their own vehicles and create looping abuse in populated areas, affecting multiple users simultaneously and in some cases leading to server performance issues or instability.

@florijanftw
Copy link
Copy Markdown

@prikolium-cfx @radium-cfx Do you have any timeline or ETA for these protections to be rolled out across all FiveM builds? At the moment, several exploit methods are being widely abused by cheaters to crash servers and negatively impact gameplay stability.

I’d also like to bring attention to this Passive Mode related fix shared by @divocbn:

[GTA:O] [CFX] Passive Mode + Fix https://www.youtube.com/watch?v=IXXxhkDEt6A

This exploit is currently being used by cheaters to gain invincibility and abuse gameplay mechanics on multiple servers.

Additionally, please take a look at this vehicle hijack fix:

[GTA:O] [CFX] Susano's New Vehicle Hijack Fix https://www.youtube.com/watch?v=AVMPGVLQx5s

This exploit is being heavily exploited to force players out of their own vehicles and create looping abuse in populated areas, affecting multiple users simultaneously and in some cases leading to server performance issues or instability.

Issue solved problem was in code from command /me or /do , just remove those commands and Cold Menu will not be able to crash.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

invalid Requires changes before it's considered valid and can be (re)triaged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

NEW CRASH METHOD

5 participants