PT-2023-24519 · Renderdoc · Renderdoc

CVE-2023-33863

·

Publicado

2023-06-07

·

Atualizado

2025-01-08

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions RenderDoc versions prior to 1.27
Description The issue arises from an integer overflow in the SerialiseValue function, which leads to a buffer overflow. This occurs when the value 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE MAX) and then an attempt is made to add 1.
Recommendations For RenderDoc versions prior to 1.27, update to version 1.27 or later to resolve the issue.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2023-33863
DLA-3501-1
DLA-3987-1
OPENSUSE-SU-2023:0253-1
OPENSUSE-SU-2024:12986-1

Produtos afetados

Renderdoc