PT-2025-42216 · Valve · Source Sdk

Published 2025-10-15 · Updated 2025-10-15 · CVE-2017-20205

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Valve's Source SDK (source-sdk-2013) (affected versions not specified)

Description The ragdoll model parsing logic in Valve's Source SDK (source-sdk-2013) contains a stack-based buffer overflow. The nexttoken function copies characters from an input string into a fixed-size stack buffer without bounds checking. When the ParseKeyValue function processes a collisionpair rule exceeding the destination buffer size of 256 bytes, an overflow of the szToken stack buffer can occur, potentially overwriting the function return address. An attacker can trigger this by providing a specially crafted ragdoll model, leading to remote code execution on affected clients or servers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2017-20205

Affected Products

Source Sdk

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-20205 · Security Note
• https://github.com/ValveSoftware/source-sdk-2013 · Note
• https://oneupsecurity.com/research/remote-code-execution-in-source-games · Note
• https://t.me/CVEtracker/34927 · Telegram Post
• https://vulncheck.com/advisories/valve-source-sdk-stack-based-buffer-overflow-rce · Note