CVE-2023-29146

The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB. This leads to an integer wrap-around if the data is larger than the maximum unsigned integer value (32-bit). Attackers could create a colliding hash value for two different strings by attaching 4GB of data to a string that is less than 4GB in size.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.5 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.malwarebytes.com/secure/cves/cve-2023-29146

Configurations

No configuration.

History

23 Jul 2026, 08:10

Type	Values Removed	Values Added
Summary		(es) Las funciones de utilidad utilizadas por Malwarebytes EDR 1.0.11 en Linux para calcular un hash criptográfico de bytes de datos truncan los datos hasheados si exceden los 4 GB. Esto lleva a un desbordamiento de enteros si los datos son mayores que el valor máximo de un entero sin signo (32 bits). Los atacantes podrían crear un valor de hash colisionante para dos cadenas diferentes al adjuntar 4 GB de datos a una cadena de menos de 4 GB de tamaño.

09 Jun 2026, 20:16

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 8.2
CWE		CWE-190

09 Jun 2026, 19:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-09 19:16

Updated : 2026-07-23 08:10

NVD link : CVE-2023-29146

Mitre link : CVE-2023-29146

CVE.ORG link : CVE-2023-29146

JSON object : View

Products Affected

No product.

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2023-29146", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-29146", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-09T19:25:19.081019Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.5}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-06-09T19:16:41.760", "references": [{"url": "https://www.malwarebytes.com/secure/cves/cve-2023-29146", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB. This leads to an integer wrap-around if the data is larger than the maximum unsigned integer value (32-bit). Attackers could create a colliding hash value for two different strings by attaching 4GB of data to a string that is less than 4GB in size."}, {"lang": "es", "value": "Las funciones de utilidad utilizadas por Malwarebytes EDR 1.0.11 en Linux para calcular un hash criptogr\u00e1fico de bytes de datos truncan los datos hasheados si exceden los 4 GB. Esto lleva a un desbordamiento de enteros si los datos son mayores que el valor m\u00e1ximo de un entero sin signo (32 bits). Los atacantes podr\u00edan crear un valor de hash colisionante para dos cadenas diferentes al adjuntar 4 GB de datos a una cadena de menos de 4 GB de tama\u00f1o."}], "lastModified": "2026-07-23T08:10:00.137", "sourceIdentifier": "cve@mitre.org"}