CVE-2020-6016

2020-11-1814:11:49

CWE-590

checkpoint

www.cve.org

valve

game networking sockets

heap-based buffer underflow

remote code execution

memory corruption

AI Score

9.9

Confidence

High

EPSS

0.011

Percentile

84.6%

JSON

Valve’s Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of memory not from the heap, resulting in a memory corruption and probably even a remote code execution.

CNA Affected

[
  {
    "product": "Game Networking Sockets",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to v1.2.0"
      }
    ]
  }
]