CVE-2020-14983: Chocolate-Doom Chocolate Doom

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.

Affected products

• Chocolate-Doom Chocolate Doom: version 3.0.0 only
• Chocolate-Doom Crispy Doom: version 5.8.0 only
• Opensuse Backports: version sle-15 only
• Opensuse Leap: version 15.1 only; version 15.2 only

Published 2020-06-22. Last modified 2026-06-17.