← Database

CVE-2003-1432

CRITICAL CVSS: 10.0 Published: 2003-12-31 Modified: 2026-06-16

Description

Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.

Affected Platforms

Epic Games Unreal Tournament 2003Epic Games Unreal Engine

Weakness Type

CWE-94, CWE-189

References