CVE-2025-14307
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions.
Risk Assessment
This vulnerability can allow attackers to execute arbitrary code or overwrite critical files, leading to potential unauthorized actions.
Recommendation
Update Robocode to a version newer than 1.9.3.6 that includes a secure implementation of temporary file creation.
Other vulnerabilities in Robocode
See all- CVE-2025-14308Critical
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, potentially leading to buffer overflows and arbitrary code execution. Attackers can exploit this by submitting specially crafted inputs.
- CVE-2025-14306Critical
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs.
Original NVD description (English source)
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS