Code injection

schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a GetValue call...

CVE-2020-7949

CVE-2020-7949 affects Valve Dota 2 via schemasystem.dll in versions before 7.23f. The root cause is a mishandled map during a GetValue call, allowing remote code execution or denial of service when an attacker creates a gaming server and invites a victim. Public PoCs and exploit references exist ...