Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2023-33863

Published: 07/06/2023 Updated: 25/11/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Renderdoc

Vulnerability Summary

SerialiseValue in RenderDoc prior to 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

renderdoc renderdoc

Vendor Advisories

Debian CVElist Bug Report Logs: renderdoc: CVE-2023-33863 CVE-2023-33864 CVE-2023-33865
Debian Bug report logs - #1037208 renderdoc: CVE-2023-33863 CVE-2023-33864 CVE-2023-33865 Package: src:renderdoc; Maintainer for src:renderdoc is Debian X Strike Force <debian-x@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 7 Jun 2023 19:00:01 UTC Severity: important Tags: secur ...

Exploits

Exploit DB: RenderDoc 1.26 Local Privilege Escalation / Remote Code Execution
RenderDoc versions 126 and below suffer from integer underflow, integer overflow, and symlink vulnerabilities ...

References

CWE-190https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txthttps://renderdoc.org/http://seclists.org/fulldisclosure/2023/Jun/2http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.htmlhttps://lists.debian.org/debian-lts-announce/2023/07/msg00023.htmlhttps://security.gentoo.org/glsa/202311-10https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037208https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook