writeups.xyz / Achieving Remote Code Execution in Steam: a journey into the Remote Play protocol

Submitter : c2a

Date: 4 December 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Reverse Engineering
• Fuzzing
• Path Traversal
• Memory Corruption
• Heap Overflow
• Format String Vulnerability

Programs :

• Valve

Authors :

• Valentino Ricotta

Link :
https://blog.thalium.re/posts/achieving-remote-code-execution-in-steam-remote-play/