Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Epicgames Subscribe
Filtered by product Unreal Engine
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-6441 1 Epicgames 1 Unreal Engine 2018-10-11 9.3 HIGH N/A
Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command.
CVE-2010-2702 1 Epicgames 6 Postal 2, Raven Shield, Swat 4 and 3 more 2017-08-16 9.3 HIGH N/A
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.