Valve: Steam Deck Single Click Root Remote Code Execution

Vulnerability description not provided...

CVE-2021-32795

ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service aka DoS vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat...

CVE-2021-32795 Denial of Service via Steam chat in ArchiSteamFarm

ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service aka DoS vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat...

PT-2021-19937

Name of the Vulnerable Software and Affected Versions ArchiSteamFarm versions prior to 4.3.1.0 Description ArchiSteamFarm is a C application for idling Steam cards from multiple accounts simultaneously. A Denial of Service vulnerability exists in versions prior to 4.3.1.0, allowing an attacker to...

CVE-2021-32795: Improper Input Validation

ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. In versions prior to 4.3.1.0 a Denial of Service aka DoS vulnerability which allows attacker to remotely crash running ASF instance through sending a specifically-crafted Steam chat...

Valve: code injection, steam chat client

The steam chat client allows oEmbed, apparently based on a whitelist. One of the whitelisted oEmbedis codepen. When a codepen is created, it can be sent as a link to another steam user, and the code inside the codepen will execute within the privileged Steam Chat context. You can send these codep...