CVE-2020-14939

Publication date

2020-06-23 09:56:50

Family

mitre

State

PUBLISHED

Description

An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a games state. A file can be modified to put any Lua code inside, leading to arbitrary code execution while loading.