Lucene search

K
nvd[email protected]NVD:CVE-2023-33863
HistoryJun 07, 2023 - 8:15 p.m.

CVE-2023-33863

2023-06-0720:15:09
CWE-190
web.nvd.nist.gov
cve-2023-33863
serialisevalue
renderdoc
integer overflow
buffer overflow
size_max
attempt to add

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.8%

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.

Affected configurations

NVD
Node
renderdocrenderdocRange<1.27

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.8%