What’s Vulnerable › Vulnerabilities

CVE-2020-14938

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-06-23 · updated 2026-06-17
• Weakness: CWE-787

Description

An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.

Affected products

• Freedroidrpg: 1.0-rc2

References

• https://bugs.freedroid.org/b/issue951
• https://logicaltrust.net/blog/2020/02/freedroid.html
• https://bugs.freedroid.org/b/issue951
• https://logicaltrust.net/blog/2020/02/freedroid.html

Get alerted when CVE-2020-14938 or the next vulnerability affects your stack