UBUNTU-CVE-2023-33863

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff SIZEMAX and then there is an attempt to add 1...

UBUNTU-CVE-2023-33864

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...

UBUNTU-CVE-2023-33865

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership...

Integer overflow

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...

Design/Logic Flaw

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership...

RenderDoc 输入验证错误漏洞

RenderDoc is a standalone graphics debugger from the RenderDoc open source. An input validation error vulnerability exists in RenderDoc 1.26 and earlier versions, which stems from allowing integer overflows and causing buffer overflows...

RenderDoc 后置链接漏洞

RenderDoc is a standalone graphical debugger from the RenderDoc open source. RenderDoc 1.26 and earlier versions suffer from a backlink vulnerability that stems from allowing local elevation of privilege via a symbolic link attack...

CVE-2023-33865

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership...

CVE-2023-33863

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff SIZEMAX and then there is an attempt to add 1...

CVE-2023-33864

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...

CVE-2023-33865

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership...

PT-2023-24519 · Renderdoc · Renderdoc

Name of the Vulnerable Software and Affected Versions: RenderDoc versions prior to 1.27 Description: The issue arises from an integer overflow in the SerialiseValue function, which leads to a buffer overflow. This occurs when the value 0xffffffff is sign-extended to 0xffffffffffffffff SIZE MAX an...

CVE-2023-33864

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...

CVE-2023-33865: Improper Link Resolution Before File Access

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership...

RenderDoc 输入验证错误漏洞

RenderDoc is a standalone graphics debugger from the RenderDoc open source. An input validation error vulnerability exists in RenderDoc 1.26 and earlier versions, which stems from allowing integer overflows and causing buffer overflows...

CVE-2023-33863

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff SIZEMAX and then there is an attempt to add 1...

CVE-2023-33865

CVE-2023-33865 series in RenderDoc : Open-source graphics debugger RenderDoc before 1.27 is vulnerable to a symlink-based local privilege escalation in /tmp/RenderDoc. This is part of a trio of issues (CVE-2023-33863, CVE-2023-33864, CVE-2023-33865) that also include integer overflow/underflow le...

CVE-2023-33863

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff SIZEMAX and then there is an attempt to add 1...

CVE-2023-33864

CVE-2023-33864 is a vulnerability in RenderDoc prior to version 1.27 where an Integer Overflow can lead to a Buffer Overflow due to using uint32_t(m_BufferSize-m_InputSize) even when m_InputSize exceeds m_BufferSize. Public-article sources in connected documents confirm affected product(RenderDoc...

CVE-2023-33864: Integer Overflow or Wraparound

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...