CVE-2023-33863
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
In RenderDoc before version 1.27, there is a buffer overflow vulnerability caused by an integer overflow. The value 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX), and then there is an attempt to add 1.
Risk Assessment
This vulnerability may lead to unauthorized memory access, posing a risk to the integrity and confidentiality of data within the system.
Recommendation
It is recommended to update RenderDoc to version 1.27 or later to mitigate this vulnerability.
Other vulnerabilities in RenderDoc
See all- CVE-2023-33864Critical
In RenderDoc before version 1.27, there is an Integer Overflow in the StreamReader::ReadFromExternal function, leading to a Buffer Overflow. This issue arises from using uint32_t(m_BufferSize-m_InputSize), where m_InputSize can exceed m_BufferSize.
- CVE-2023-33865High
RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.
Original NVD description (English source)
SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.