CVE-2020-7949

CVE-2020-7949 is a high-severity vulnerability affecting Valve Dota 2 versions prior to 7.23f, specifically within the schemasystem.dll. It allows remote attackers to achieve code execution or denial of service by creating a malicious gaming server and inviting a victim, exploiting a crafted map during a GetValue call. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and leading to high impacts on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Proof-of-Concept for denial of service is publicly available on ExploitDB, though there's no evidence of active exploitation or significant community discussion.