CVE-2025-14308criticalCWE-190

CVE-2025-14308: falha crítica em Robocode

Integer Overflow in Robocode's Buffer Write Method

Publicada em

Seguir esta CVE+ Monitorar Robocode+ Monitorar robocode

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 0.6%
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red
Produtos afetados
Robocode Project · Robocode
CVEs relacionadas — Robocode

No mesmo produto, das mais perigosas para as menos.

CVE-2025-14306CRITICALDirectory Traversal in Robocode's CacheCleaner ComponentEPSS 1.1%CVE-2025-14307CRITICALInsecure Temporary File Creation in Robocode's AutoExtract ComponentEPSS 0.3%