Read the docs

Idsoftware

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Idsoftware records in CISA KEV

No Idsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Tech 1 · all components

Priority MEDIUM 47

A buffer overflow in the M_LoadDefaults function in m_misc.c in id Tech 1 (aka Doom engine) allows arbitrary code execution via an unsafe usage of fscanf, because it does not limit the number of characters to be read in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02491 Published 2020-06-24 No fix listed CWE-120
Open these records in search →