CVE-2025-14308

Critical

Published: 09/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, potentially leading to buffer overflows and arbitrary code execution. Attackers can exploit this by submitting specially crafted inputs.

Risk Assessment

The vulnerability could allow an attacker to execute arbitrary code in the context of the application, potentially leading to system compromise or data confidentiality breach.

Recommendation

Upgrade Robocode to the latest version or apply vendor patches to remediate the vulnerability.

Original NVD description (English source)

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.