CVE-2021-30481 log

Source
Severity High
Remote Yes
Type Arbitrary code execution
Description
Valve Steam through 2021-04-10, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.
Group Package Affected Fixed Severity Status Ticket
AVG-1800 steam 1.0.0.73-1 High Not affected
References
https://secret.club/2021/04/20/source-engine-rce-invite.html
https://news.ycombinator.com/item?id=26762170
https://twitter.com/floesen_/status/1337107178096881666
https://twitter.com/the_secret_club/status/1380868759129296900
https://www.youtube.com/watch?v=rNQn--9xR1Q