Terra Informatica Sciter Information Disclosure Vulnerability in Video Rendering Component

A vulnerability in Terra Informatica Software, Inc Sciter version 4.4.7.0 allows local attackers to access sensitive information. This issue arises from an unsound implementation in the video rendering component, where raw pointers can be manipulated to cause undefined behavior and potentially expose private data.

Impact

Exploitation of this vulnerability could lead to undefined behavior, allowing for sensitive information to be accessed improperly.

Reproduction

The vulnerability can be reproduced by creating a pointer to a byte-sized variable and then using the `AssetPtr::adopt` method to pass it as a pointer to a type that is larger, such as `iasset`. This misalignment causes the pointer to be dereferenced incorrectly, leading to out-of-bounds access and undefined behavior.