CVE-2023-33863: Renderdoc

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.

Affected products

  • Renderdoc Renderdoc: before 1.27 (fixed in 1.27)

Published 2023-06-07. Last modified 2026-06-17.