Chocolate Doom vulnerabilities

1 vulnerability

Known vulnerabilities in Chocolate Doom products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
9.8CVE-2020-14983chocolate-doomchocolate_doom+11
EPSS score
2.69%
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.