Related Vulnerabilities: CVE-2021-30481  

Valve Steam through 2021-04-10, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.

Severity High

Remote Yes

Type Arbitrary code execution

Description

Valve Steam through 2021-04-10, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.

AVG-1800 steam 1.0.0.70-1 High Vulnerable

https://news.ycombinator.com/item?id=26762170
https://twitter.com/floesen_/status/1337107178096881666
https://twitter.com/the_secret_club/status/1380868759129296900
https://www.youtube.com/watch?v=rNQn--9xR1Q