CVE-2020-14938

CVE-2020-14938 affects FreedroidRPG 1.0rc2, specifically the code in map.c that handles data from saved game files. The vulnerability arises from assuming data-set lengths and copying data from a file into a fixed-size heap-allocated buffer without proper size verification, causing a heap-based b...

CVE-2020-14939

FreedroidRPG 1.0rc2 is affected by CVE-2020-14939 due to a flaw in savestruct_internal.c: saved game files are Lua scripts that recover a game’s state, allowing an attacker to inject arbitrary Lua code during loading. This can lead to arbitrary code execution on load. The vulnerability is locally...