SteamSocketEventHandler missing nullptr check crashes server

FSteamSocketsSubsystem::SteamSocketEventHandler doesn't check for SocketInfo being nullptr, which can be exploited to crash a server.

https://github.com/EpicGames/UnrealEngine/blob/4.27/Engine/Plugins/Runtime/Steam/SteamSockets/Source/SteamSockets/Private/SteamSocketsSubsystem.cpp#L858

Here are some of the crash minidumps from this exploit.

UE4Minidump.dmp

936.4 KB

UE4Minidump.dmp

925.8 KB

UE4Minidump.dmp

919.9 KB

Please authenticate to join the conversation.

Upvoters
Status

Planned

Board

Bug Report

Date

About 3 hours ago

Author

kotofyt

Subscribe to request

Get notified by email when there are changes.