Client crash via unchecked strcpy

Buffer overflow in Moonlight-common-c allows remote attackers to crash a Moonlight client via a malicious game streaming server after pairing. The extractVersionQuadFromString function copies an attacker-controlled version string with strcpy into a fixed-size stack buffer without bounds checking. Exploitation requires tricking the client into pairing with the malicious host; stack canaries make remote code execution unlikely in official binaries, although weaker mitigations can change the outcome.