What’s Vulnerable › Vulnerabilities
CVE-2003-1432
- Severity: critical (CVSS 10.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 7.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2003-12-31 · updated 2026-06-16
- Weakness: CWE-94
Description
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
Affected products
- Epic Games Unreal Engine: 226f, 433, 436
- Epic Games Unreal Tournament 2003: 2199_linux, 2199_win32, demo_version_2206_linux, demo_version_2206_win32
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html
- http://archives.neohapsis.com/archives/bugtraq/2003-05/0142.html
- http://www.securityfocus.com/bid/6770
- http://www.securityfocus.com/bid/6772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11305
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12012
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0063.html
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0142.html
- http://archives.neohapsis.com/archives/bugtraq/2003-05/0142.html
- http://www.securityfocus.com/bid/6770
Get alerted when CVE-2003-1432 or the next vulnerability affects your stack