CVE-2004-1805: Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to caus...

Security readout for executives and security teams

This old vulnerability affects games built on Epic Games Unreal Engine 436. A remote attacker could send crafted class-name data that causes a crash, and the CVE says arbitrary code execution may be possible. The provided sources do not identify exact game titles, versions, or confirmed active exploitation. Exposure is most likely on legacy multiplayer game servers or clients using Epic Games Unreal Engine 436. The provided affected-products data is incomplete, so teams need asset-specific verification rather than assuming all Unreal-based software is affected. Prioritize if the organization still runs legacy Unreal Engine 436-based game infrastructure or exposes it to the internet. If no such assets exist, business urgency is low after documented verification. Mitigation focus: Identify any deployed games or services using Unreal Engine 436.; Check each game or vendor advisory for patched builds or retirement guidance.; Remove or isolate unsupported internet-facing legacy game servers..

Prepared

Jun 29, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.