Skip to content

Product

valve software Source SDK (source-sdk-2013) vulnerabilities

1 published CVE affecting valve software Source SDK (source-sdk-2013), from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest valve software Source SDK (source-sdk-2013) CVEs

Newest publication first

  1. CVE-2017-20205 Valve Source SDK Stack-Based Buffer Overflow RCE

    Published
    CriticalCVSS 9.2 EPSS 0.69%

    Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function nexttoken copies characters from an input string into a fixed-size stack buffer without performing bounds checks. When ParseKeyValue proc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.