Security News > 2021 > February > Cyberpunk 2077 bug fixed that let malicious mods take over PCs
CD Projekt Red has released a hotfix for Cyberpunk 2077 to fix a remote code execution vulnerability that could be exploited by third-party data file modifications and save games files.
On February 2nd, 20201, CD Projekt warned that Cyberpunk 2077 users should avoid using files, such as mods that modify data files or custom save game files, due to a vulnerability in how the game uses DLL files.
We've been made aware of a vulnerability in external DLL files the game uses which can be used to execute code on PCs. Issue will be fixed ASAP. For now, please refrain from using files from unknown sources.
To resolve the vulnerabilities, CD Projekt has released Cyberpunk 2077 Hotfix 1.12, which states it "Fixed a buffer overrun issue" and "Removed/replaced non-ASLR DLLs.".
Exe executable now loads the ASLR-enabled C:WindowsSystem32xinput1 4.dll file bundled with Windows 10.
The ASLR feature is shown to be enabled in the xinput1 4.dll file by the 'dynamic base' characteristic displayed using the 'dumpbin.