CVE-2018-20817

CVE-2018-20817 affects SV_SteamAuthClient in multiple Activision Infinity Ward Call of Duty titles (MW2, MW3, Ghosts, AW, Black Ops 1/2) released before 2015-08-11. The root cause is a missing size check when reading authBlob data into a buffer, enabling remote code execution via a crafted steam ...