CVE-2023-33863

CriticalCVSS 9.8

Published: 07/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.65%

88th percentile - higher than 88% of all known CVEs

Summary

In RenderDoc before version 1.27, there is a buffer overflow vulnerability caused by an integer overflow. The value 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX), and then there is an attempt to add 1.

Risk Assessment

This vulnerability may lead to unauthorized memory access, posing a risk to the integrity and confidentiality of data within the system.

Recommendation

It is recommended to update RenderDoc to version 1.27 or later to mitigate this vulnerability.

Original NVD description (English source)

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.