[FullDisclosure] LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863

[github-actions[bot]]

Posted by Qualys Security Advisory via Fulldisclosure on Jun 07

Qualys Security Advisory

LPE and RCE in RenderDoc: CVE-2023-33865, CVE-2023-33864, CVE-2023-33863

========================================================================

Contents

========================================================================

Summary

CVE-2023-33865, a symlink vulnerability in /tmp/RenderDoc

- Analysis

- Exploitation

CVE-2023-33864, an integer underflow to heap-based buffer overflow

- Analysis

- Exploitation...

https://seclists.org/fulldisclosure/2023/Jun/2

[github-actions[bot]]

This issue is stale because it has been open 1 day with no activity. Remove stale label or comment or this will be closed in 1 day.

[github-actions[bot]]

This issue was closed because it has been stale with no activity.