CVE-2020-14938

Summary

An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://bugs.freedroid.org/b/issue951
• https://logicaltrust.net/blog/2020/02/freedroid.html

References

• https://bugs.freedroid.org/b/issue951
• https://logicaltrust.net/blog/2020/02/freedroid.html

• ←Previous
• Next→