CVE-2025-14307criticalCWE-377

CVE-2025-14307: falha crítica em Robocode

Insecure Temporary File Creation in Robocode's AutoExtract Component

Publicada em

Seguir esta CVE+ Monitorar Robocode+ Monitorar robocode

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.3%
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red
Produtos afetados
Robocode Project · Robocode
CVEs relacionadas — Robocode

No mesmo produto, das mais perigosas para as menos.

CVE-2025-14306CRITICALDirectory Traversal in Robocode's CacheCleaner ComponentEPSS 1.1%CVE-2025-14308CRITICALInteger Overflow in Robocode's Buffer Write MethodEPSS 0.6%