PT-2025-49807 · Robocode+1 · Robocode+1

[e-mail] · Published 2025-01-01 · Updated 2026-01-05 · CVE-2025-14308

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red

Name of the Vulnerable Software and Affected Versions Robocode version 1.9.3.6

Description An integer overflow issue exists in the write method of the Buffer class. The method does not correctly validate the length of data being written, which could allow attackers to cause a buffer overflow and potentially achieve arbitrary code execution. Exploitation involves submitting specially crafted inputs that manipulate the data length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-14308

Affected Products

Debian

Robocode

References · 13

• https://github.com/robo-code/robocode/pull/70 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14308 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14308 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-14308 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14308 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-14308 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-14308 · Vendor Advisory
• https://twitter.com/0dayPublishing/status/1998300408909799514 · Twitter Post
• https://t.me/CVEtracker/39229 · Telegram Post
• https://t.me/cveNotify/147721 · Telegram Post
• https://twitter.com/offseq/status/1998317536589307946 · Twitter Post
• https://twitter.com/CVEnew/status/1998355358964932673 · Twitter Post