[Valve] OOB reads in network message handlers leads to RCE
Original Post:
We discussed this vulnerability during Episode 76 on 11 May 2021
Another indexing issue, and entity index is received and used, but only the lower bound (>= 0) is checked, leading to an OOB access and a virtual function call.