PT-2025-44627 · Yoyo Games · Gamemaker Ide

Published 2025-10-31 · Updated 2025-10-31 · CVE-2025-12501

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GameMaker IDE versions prior to 2024.14.0

Description An integer overflow exists in GameMaker IDE versions prior to 2024.14.0. This issue can result in application crashes, leading to denial-of-service (DoS) attacks. The network create server() function is specifically implicated. GameMaker users utilizing this function in their projects are strongly advised to update and recompile their projects.

Recommendations Update GameMaker IDE to version 2024.14.0 or later. Recompile projects after updating to ensure the fix is applied.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-12501

Affected Products

Gamemaker Ide

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-12501 · Security Note
• https://twitter.com/VulmonFeeds/status/1984357365240438954 · Twitter Post
• https://twitter.com/CVEnew/status/1984277952465612862 · Twitter Post
• https://t.me/CVEtracker/36303 · Telegram Post
• https://t.me/cveNotify/141145 · Telegram Post
• https://blogs.opera.com/security/2025/10/gamemaker-security-update-cve-2025-12501 · Note