CVE-2020-7950: Valvesoftware Dota 2

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a vulnerable function call.

Affected products

• Valvesoftware Dota 2: before 7.23f (fixed in 7.23f)

Published 2020-01-27. Last modified 2026-06-17.