High severity8.0NVD Advisory· Published Apr 10, 2021· Updated Jun 17, 2026

CVE-2021-30481

Description

Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.

Affected products

Valve Software/Steamllm-create2 versions
<2021-04-17+ 1 more
- (no CPE)range: <2021-04-17
- (no CPE)
Valve Software/Steam Client
cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*
Range: <=2021-04-10

Patches

Vulnerability mechanics

References

twitter.com/the_secret_club/status/1380868759129296900nvdExploitThird Party Advisory
www.youtube.com/watchnvdExploitThird Party Advisory
news.ycombinator.com/itemnvdIssue TrackingThird Party Advisory
twitter.com/floesen_/status/1337107178096881666nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000