Required CVE Record Information
Description
An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 2 Total
- https://bugs.freedroid.org/b/issue951 x_transferred
- https://logicaltrust.net/blog/2020/02/freedroid.html x_transferred