Debian/renderdoc: critical 9.8
SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MAX) and then there is an attempt to add 1.
Action: Upgrade renderdoc to 1.24+dfsg-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.24+dfsg-1+deb12u1 | - |
Fixed versions
| 1.24+dfsg-1+deb12u1 |
Sources
published · modified · JSON