CVE-2020-14939

PoC ×2—

CVSS 3.1

7.8 high

EPSS

1%p69

Published

Jun 23, 2020 (Jun 23, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be modified to put any Lua code inside, leading to arbitrary code execution while loading.

Vendors: freedroid
Products: freedroidrpg
Weakness: CWE-20
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.