CVE-2023-29146

Name of the Vulnerable Software and Affected Versions Malwarebytes EDR version 1.0.11

Description Utility functions used on Linux for calculating cryptographic hashes of data bytes truncate data exceeding 4GB. This causes an integer wrap-around when data exceeds the maximum 32-bit unsigned integer value. This behavior allows attackers to generate colliding hash values for two different strings by appending 4GB of data to a string smaller than 4GB.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.