Vulnerabilities (CVE)

Filtered by vendor Chocolate-doom Subscribe
Filtered by product Chocolate Doom
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-14983 2 Chocolate-doom, Opensuse 4 Chocolate Doom, Crispy Doom, Backports and 1 more 2023-12-10 7.5 HIGH 9.8 CRITICAL
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.