CVE-2023-33864

CVE-2023-33864 is a critical integer overflow vulnerability in RenderDoc versions prior to 1.27, specifically within the StreamReader::ReadFromExternal function, which can lead to a buffer overflow. This flaw arises because m_InputSize can exceed m_BufferSize, causing incorrect size calculations. It carries a CVSS score of 9.8 (Critical), indicating a severe impact with high confidentiality, integrity, and availability compromise, and can be exploited remotely without authentication or user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting a high level of awareness and potential for future exploitation.