CVE-2019-20797: Prboom-Plus Project Prboom-Plus

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.

Affected products

• Prboom-Plus Project Prboom-Plus: version 2.5.1.5 only

Published 2020-05-18. Last modified 2026-06-17.