Log in Start free

Vulnerability · Published Dec 9, 2025 · Assigned by GovTech CSG

CVE-2025-14308Integer Overflow in Robocode's Buffer Write Method

Critical 10.0

In plain English

A critical-severity integer overflow in Robocode from Robocode Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 4.0)10.0Critical
Exploit odds (30 days)0.6%top 52.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12robocodeno fix listedDEBIAN-CVE-2025-14308
Debian:13robocodeno fix listedDEBIAN-CVE-2025-14308
Debian:14robocodeno fix listedDEBIAN-CVE-2025-14308
Ubuntu:25.10robocodeno fix listedUBUNTU-CVE-2025-14308
Ubuntu:26.10robocodeno fix listedUBUNTU-CVE-2025-14308

Affected products (as reported)

VendorProductVersions
Robocode Project Robocode 1.9.3.6

Weakness: CWE-190 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/R:U/V:D/RE:M/U:Red

References