9.6 High
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.8%
StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.
packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html
seclists.org/fulldisclosure/2023/Jun/2
lists.debian.org/debian-lts-announce/2023/07/msg00023.html
renderdoc.org/
security.gentoo.org/glsa/202311-10
www.qualys.com/2023/06/06/renderdoc/renderdoc.txt