Skip to content
OpenAdvisories

Product · Valve Software

Source SDK (source-sdk-2013)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2017-20205

    Valve Source SDK Stack-Based Buffer Overflow RCE

    Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function `nexttoken` copies characters from an input string into a fixed-size stack buffer without performing bounds checks. …

    Valve Software Source SDK (source-sdk-2013)