Description
An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.
References (2)
Core 2
Core References
Exploit, Issue Tracking, Vendor Advisory x_refsource_misc
https://bugs.freedroid.org/b/issue951
Exploit, Third Party Advisory x_refsource_misc
https://logicaltrust.net/blog/2020/02/freedroid.html
Scores
CVSS v3
9.8
EPSS
0.0138
EPSS Percentile
68.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (1)
freedroid/freedroidrpg
1.0 rc2
Published
Jun 23, 2020
Tracked Since
Feb 18, 2026