CVE-2025-54065

GZDoom (versions 4.14.2 and earlier) is affected. In ZScript actor state handling, scripts can read arbitrary addresses, write constants into the JIT-compiled code section, and redirect control flow through crafted FState and VMFunction structures. A script can copy FState structures into a writa...