CVE-2021-30481

Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow…

High · published April 10, 2021

CVSS v3.1
8.0
EPSS
4%
Percentile
89.1
In the wild
Unconfirmed
What it is

Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:R
CVSS v4.0
Not supplied
EPSS
0.03504 · 89.1th percentile
Published
2021-04-10T18:31Z
EPSS history
Timeline
  • 10 APR 18:31Z
    Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow…
    cvelistv5