CVE-2025-14308criticalCWE-190

CVE-2025-14308: fallo crítico en Robocode

Integer Overflow in Robocode's Buffer Write Method

Publicada el

Seguir esta CVE+ Monitorear Robocode+ Monitorear robocode

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 10epss 0.6%
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red
Productos afectados
Robocode Project · Robocode
CVEs relacionadas — Robocode

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-14306CRITICALDirectory Traversal in Robocode's CacheCleaner ComponentEPSS 1.1%CVE-2025-14307CRITICALInsecure Temporary File Creation in Robocode's AutoExtract ComponentEPSS 0.3%