secure-77 / CVE-2022-31262

GOG Galaxy LPE Exploit

CVE-2022-31262

GOG Galaxy 2.X LPE Exploit CVE-2022-31262

Tested Versions 2.0.46 - 2.0.51 (latest at 11.08.2022), older versions may also be vulnerable

Blog Post about the finding: https://secure77.de/gog-galaxy-cve-2022-31262/

LPE found via: https://github.com/secure-77/PSAccessFinder

POC Demo

Thanks to Wh04m1001 for the cpp support