CVE-2020-6019

Name of the Vulnerable Software and Affected Versions Valve's Game Networking Sockets versions prior to v1.2.0

Description The issue arises from improper handling of inlined statistics messages in the CConnectionTransportUDPBase::Received Data() function, leading to an exception thrown from libprotobuf and resulting in a crash.

Recommendations For versions prior to v1.2.0, update to version v1.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the CConnectionTransportUDPBase::Received Data() function until a patch is available.