CVE-2025-14308
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, potentially leading to buffer overflows and arbitrary code execution. Attackers can exploit this by submitting specially crafted inputs.
Risk Assessment
The vulnerability could allow an attacker to execute arbitrary code in the context of the application, potentially leading to system compromise or data confidentiality breach.
Recommendation
Upgrade Robocode to the latest version or apply vendor patches to remediate the vulnerability.
Other vulnerabilities in Robocode
See all- CVE-2025-14306Critical
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs.
- CVE-2025-14307High
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions.
Original NVD description (English source)
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS