CVE-2020-7949

7.8 highEPSS 4.2%

High (7.8) in valvesoftware dota 2. EPSS 4.2% chance of exploitation in the next 30 days.

schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a GetValue call.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-11-01)
Published: 2020-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

valvesoftware:dota_2

References

https://github.com/bi7s/CVE/tree/master/CVE-2020-7949
https://github.com/bi7s/CVE/tree/master/CVE-2020-7949

Check your stack JSON