← Back to browse · API

CVE-2023-33864

Severity
CRITICAL
CVSS
9.8
EPSS
0.03648
Risk score
40.48
CISA KEV
No
PoC
No
Published
2023-06-07
Modified
2025-11-03
First seen
2026-08-07
Aliases
EUVD-2023-38014, GHSA-WF52-5WVV-68VV
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-38014

Description

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.

References