CVE catalog
CVE-2025-14308
Robocode vulnerabilities
- Severity
- Critical · CVSS 10
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:M/U:Red - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.58% · Oct 25, 2026
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | robocode | sid | 1.9.3.9-5 | vulnerable |
| Debian | robocode | forky | 1.9.3.9-5 | vulnerable |
| Debian | robocode | trixie | 1.9.3.9-4 | vulnerable |
| Debian | robocode | bookworm | 1.9.3.9-3 | vulnerable |
| Ubuntu | robocode | noble | Not reported | vulnerable |
| Ubuntu | robocode | noble | 1.9.3.9-3ubuntu0.1~esm1 | fixed |
| Cpe | robocode | Not reported | Not reported | unknown |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | robocode | source | sid | (unfixed) | not yet assigned | Not reported | [1122289] |
| Debian | robocode | source | forky | (unfixed) | not yet assigned | Not reported | [1122289] |
| Debian | robocode | source | trixie | (unfixed) | not yet assigned | Not reported | [1122289] |
| Debian | robocode | source | bookworm | (unfixed) | not yet assigned | Not reported | [1122289] |
| Ubuntu | robocode | deb | noble | 1.9.3.9-3ubuntu0.1~esm1 | Not reported | Not reported | Not reported |
Notes
[trixie] robocode: Minor issue [bookworm] robocode: Minor issue
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [robocode]Affected
Details (2)
1.9.3.9-3· all · bookwormAffected
usn · robocode · debian · bookworm
1.9.3.9-3· all · bookwormAffected
usn · robocode · debian · bookworm
Observed: