Source (Valvesoftware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-10-15. Vendor: Valvesoftware.

CVEs of Source

• CVE-2017-20205 - CVSS 9.2 (critical), 2025-10-15: Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function `nexttoken`…
• CVE-2020-12242 - CVSS 7.8 (high), 2020-04-27: Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account.