CVE-2023-33864
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
In RenderDoc before version 1.27, there is an Integer Overflow in the StreamReader::ReadFromExternal function, leading to a Buffer Overflow. This issue arises from using uint32_t(m_BufferSize-m_InputSize), where m_InputSize can exceed m_BufferSize.
Risk Assessment
Buffer overflow may lead to unauthorized memory access, posing a risk of executing malicious code or application crashes. Organizations should be aware of potential data security threats.
Recommendation
It is recommended to update RenderDoc to version 1.27 or later to mitigate this vulnerability. Additionally, it is advisable to monitor and test applications for similar security issues.
Original NVD description (English source)
StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.