CVE-2025-14308 Integer Overflow in Robocode's Buffer Write Method
Attackers can trigger an integer overflow in Robocode's buffer write method to achieve arbitrary code execution via crafted inputs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-14308?
CVE-2025-14308 is a critical vulnerability in Robocode, published on 9 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
Weakness: CWE-190
Which versions are affected by CVE-2025-14308?
It affects 1 product.
Products include Robocode Robocode.
How do I fix CVE-2025-14308?
Upgrade to a fixed version.
Is CVE-2025-14308 being exploited?
There is no known exploitation of CVE-2025-14308 in the wild and no public exploit code.
Other vulnerabilities in Robocode
- CVE-2025-14306 Directory Traversal in Robocode's CacheCleaner Component
- CVE-2019-10648 Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction
- CVE-2025-14307 Insecure Temporary File Creation in Robocode's AutoExtract Component
- CVE-2008-2078 Other in n/a
- CVE-2007-6382 Robocode Arbitrary Code Execution
Sources
Also known as DEBIAN-CVE-2025-14308, GHSA-jqf9-28w7-q25g, UBUNTU-CVE-2025-14308.