Approved changes feed: RSS · Atom

cpe:2.3:a:robocode:robocode:1.9.3.6:*:*:*:*:*:*:*

part: a version: 1.9.3.6 update: *

VendorRobocode (4a76462b-1f6c-552f-96b8-8003ca6fd3e2)
ProductRobocode (7c66b8a7-4d52-5b95-baa9-35c57cb3a87d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/robo-code/robocode purl2cpe 2026-06-01 10:15:01.158600
pkg:maven/net.sf.robocode/robocode.core purl2cpe 2026-06-01 10:15:01.158602

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14308 vulnerable 2026-06-08 07:06:34.259276 Integer Overflow in Robocode's Buffer Write Method
An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
Published: 2025-12-09T07:44:34.003Z
Updated: 2025-12-09T14:39:50.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14307 vulnerable 2026-06-08 07:06:34.258806 Insecure Temporary File Creation in Robocode's AutoExtract Component
An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.
Published: 2025-12-09T07:29:52.225Z
Updated: 2025-12-09T16:02:14.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14306 vulnerable 2026-06-08 07:06:34.258137 Directory Traversal in Robocode's CacheCleaner Component
A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/
Published: 2025-12-09T07:19:29.686Z
Updated: 2026-01-28T19:46:04.687Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.