CVE-2017-20205

CVE-2017-20205 is a critical stack-based buffer overflow vulnerability in Valve's Source SDK (source-sdk-2013) affecting its ragdoll model parsing logic. A remote attacker can achieve remote code execution by supplying a specially crafted ragdoll model containing an oversized collisionpair rule. This vulnerability has a CVSS score of 9.2 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While Valve has patched this in many of their games, independently developed games using the SDK must apply the fix manually. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion.