CVE-2025-14308

CRITICAL

Robocode 1.9.3.6 - Buffer Overflow

Title source: llm
STIX 2.1

Description

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.

Scores

CVSS v3 9.8
EPSS 0.0012
EPSS Percentile 30.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-190
Status published
Products (1)
robocode/robocode 1.9.3.6
Published Dec 09, 2025
Tracked Since Feb 18, 2026