CyberSecBulletin

Renderdoc vulnerabilities

We track 2 vulnerabilities in Renderdoc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 7, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Renderdoc vulnerabilities

  • 9.8 Critical severity

    Renderdoc: Integer Overflow or Wraparound

    CVE-2023-33864RenderdocEPSS 4.19%

    StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.

  • 9.8 Critical severity

    Renderdoc: Integer Overflow or Wraparound

    CVE-2023-33863RenderdocEPSS 4.19%

    SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.