Cryptographic Hash Truncation Issue in Malwarebytes EDR for Linux
CVE-2023-29146

8.2HIGH

Key Information:

Vendor

Malwarebytes

Status
Malwarebytes EDR
Vendor
CVE Published:
9 June 2026

What is CVE-2023-29146?

A vulnerability in the utility functions of Malwarebytes EDR 1.0.11 on Linux allows for the truncation of cryptographic hashes, leading to an integer wrap-around scenario. When the hashed data exceeds 4GB, attackers can generate colliding hash values for different input strings. This could enable a range of potential exploits, as attackers can manipulate the system's ability to accurately verify data integrity.

References

https://www.malwarebytes.com/secure/cves/cve-2023-29146

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.