CVE-2020-6019

PoC —

CVSS 3.1

7.5 high

EPSS

3%p86

Published

Nov 13, 2020 (Nov 13, 2020)

Modified

Jun 17, 2026

Description

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulting in a crash.

Vendors: valvesoftware
Products: game networking sockets
Weakness: CWE-248
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news1 stories

Valve's Steam Server Bugs Could've Let Hackers Hijack Online Games

The Hacker NewsDec 10, 16:37 UTC · Dec 10, 2020Vulnerability CVE-2020-6016 CVE-2020-6019