RenderDoc vulnerabilities

In RenderDoc before version 1.27, there is an Integer Overflow in the StreamReader::ReadFromExternal function, leading to a Buffer Overflow. This issue arises from using uint32_t(m_BufferSize-m_InputSize), where m_InputSize can exceed m_BufferSize.

In RenderDoc before version 1.27, there is a buffer overflow vulnerability caused by an integer overflow. The value 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX), and then there is an attempt to add 1.

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.