{"id":"CVE-2020-6019","details":"Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulting in a crash.","modified":"2026-07-08T20:30:13.395447Z","published":"2020-11-13T16:15:18.463Z","references":[{"type":"FIX","url":"https://github.com/ValveSoftware/GameNetworkingSockets/commit/d944a10808891d202bb1d5e1998de6e0423af678"},{"type":"EVIDENCE","url":"https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/valvesoftware/gamenetworkingsockets","events":[{"introduced":"0"},{"fixed":"5fe10494e27be722d18c443dc70f851541e5d554"},{"fixed":"d944a10808891d202bb1d5e1998de6e0423af678"}],"database_specific":{"cpe":"cpe:2.3:a:valvesoftware:game_networking_sockets:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.2.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v1.1.0","1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6019.json","vanir_signatures_modified":"2026-07-08T20:30:13Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["180977740885410953083231793349288947850","158827332801809524682340023684164447825","118230938696202721049841602007988561738","147682018950322218072189862423202981273","249060439324792507734855365683807213112","188936255904427941690797892057514420810"],"threshold":0.9},"id":"CVE-2020-6019-0821b82c","signature_type":"Line","signature_version":"v1","source":"https://github.com/valvesoftware/gamenetworkingsockets/commit/d944a10808891d202bb1d5e1998de6e0423af678","target":{"file":"src/steamnetworkingsockets/clientlib/steamnetworkingsockets_udp.cpp"}},{"signature_version":"v1","source":"https://github.com/valvesoftware/gamenetworkingsockets/commit/d944a10808891d202bb1d5e1998de6e0423af678","target":{"file":"src/steamnetworkingsockets/clientlib/steamnetworkingsockets_udp.cpp","function":"CConnectionTransportUDPBase::Received_Data"},"deprecated":false,"digest":{"function_hash":"73977502484827419243571666738105691618","length":2154},"id":"CVE-2020-6019-cd7423ed","signature_type":"Function"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}