CVE-2008-2106: Activision Call Of Duty 4

Medium severity, CVSS 6.8. EPSS: 7.7% chance of exploitation in the next 30 days.

Call of Duty 4 (CoD4) 1.5 and earlier allows remote authenticated users to cause a denial of service (crash) via a type 7 stats packet, which triggers a memcpy with a negative value.

Affected products

• Activision Call Of Duty 4: up to and including 1.5

Published 2008-05-07. Last modified 2026-06-16.