LizardByte — Vulnerabilities & Security Advisories 11

LizardByte develops open-source gaming infrastructure software, primarily known for the Sunshine game streaming project. Historically, their vulnerabilities have commonly included remote code execution, cross-site scripting, and privilege escalation flaws. The organization has addressed multiple critical security issues, including a high-severity RCE vulnerability in Sunshine's virtual audio device driver in 2023. While no major public security incidents have been documented, the 10 CVEs attributed to LizardByte highlight ongoing security challenges in their software development lifecycle, particularly in handling complex system-level interactions and user input validation within their streaming solutions.