CVE-2023-33863 Integer overflow in n/a
An integer overflow in RenderDoc's SerialiseValue function can lead to a buffer overflow, potentially allowing code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-33863?
CVE-2023-33863 is a critical vulnerability in n/a, published on 7 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.
Weakness: CWE-190
Which versions are affected by CVE-2023-33863?
It affects 1 product.
Products include Renderdoc Renderdoc.
How do I fix CVE-2023-33863?
Upgrade to a fixed version.
Is CVE-2023-33863 being exploited?
There is no known exploitation of CVE-2023-33863 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2023-33863, GHSA-v9pp-h525-vwm9, UBUNTU-CVE-2023-33863.