CVE-2023-33864
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
In RenderDoc before version 1.27, there is an Integer Overflow in the StreamReader::ReadFromExternal function, leading to a Buffer Overflow. This issue arises from using uint32_t(m_BufferSize-m_InputSize), where m_InputSize can exceed m_BufferSize.
Risk Assessment
Buffer overflow may lead to unauthorized memory access, posing a risk of executing malicious code or application crashes. Organizations should be aware of potential data security threats.
Recommendation
It is recommended to update RenderDoc to version 1.27 or later to mitigate this vulnerability. Additionally, it is advisable to monitor and test applications for similar security issues.
Other vulnerabilities in RenderDoc
See all- CVE-2023-33863Critical
In RenderDoc before version 1.27, there is a buffer overflow vulnerability caused by an integer overflow. The value 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX), and then there is an attempt to add 1.
- CVE-2023-33865High
RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.
Original NVD description (English source)
StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.