CVE-2023-33865
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.
Risk Assessment
An attacker could gain elevated privileges on the system, potentially leading to unauthorized access to organizational data or resources.
Recommendation
It is recommended to update RenderDoc to version 1.27 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in RenderDoc
See all- CVE-2023-33864Critical
In RenderDoc before version 1.27, there is an Integer Overflow in the StreamReader::ReadFromExternal function, leading to a Buffer Overflow. This issue arises from using uint32_t(m_BufferSize-m_InputSize), where m_InputSize can exceed m_BufferSize.
- CVE-2023-33863Critical
In RenderDoc before version 1.27, there is a buffer overflow vulnerability caused by an integer overflow. The value 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX), and then there is an attempt to add 1.
Original NVD description (English source)
RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.