CVE-2023-33864: Renderdoc

Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days.

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize) even though m_InputSize can exceed m_BufferSize.

Affected products

• Renderdoc Renderdoc: before 1.27 (fixed in 1.27)

Published 2023-06-07. Last modified 2026-06-17.