CVE-2021-30481

CriticalCVSS 9.0/10Last modified Jun 17, 2026

Description

Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.

Metrics

CVSS 3.1 9.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Apr 10, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-304827.5In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctlyCVE-2021-304835.3isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository.CVE-2021-304856.5An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML file, performs incorrecCVE-2021-304868.8SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (PCVE-2021-304872.7In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizatCVE-2021-30494.3An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with iCVE-2021-304907.8upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an AutCVE-2021-304935.5Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBrCVE-2021-304945.5Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer ChCVE-2021-304965.7The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an atCVE-2021-304977.5Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath CVE-2021-304987.8A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential c
CVE-2021-30481: Critical severity, CVSS 9.0 | Vulnix