CVE-2008-6704: Stalker-Game S.t.a.l.k.e.r.: Shadow Of Chernobyl

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory.

Affected products

• Stalker-Game S.t.a.l.k.e.r.: Shadow Of Chernobyl: up to and including 1.0006

Published 2009-04-10. Last modified 2026-06-16.