VULNERABILITY INTELLIGENCE
CVE-2003-1432
CVSS score10 HIGH
EPSS probability7.54%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')