Vulnerabilities (CVE)

Filtered by vendor Epicgames Subscribe
Filtered by product Unreal Engine
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2702 1 Epicgames 6 Postal 2, Raven Shield, Swat 4 and 3 more 2023-12-10 9.3 HIGH N/A
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.
CVE-2008-6441 1 Epicgames 1 Unreal Engine 2023-12-10 9.3 HIGH N/A
Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command.