Is CVE-2023-29146 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-29146 being exploited in the wild.

How severe is CVE-2023-29146?

Informational severity, with a CVSS score of 8.2, published 9 June 2026.

Which products and versions are affected?

Malwarebytes Endpoint Agent < 1.1.64; Malwarebytes for Windows Update package version < 1.0.106875.

Is there a fix for CVE-2023-29146?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2023-29146 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2023-29146?

Check whether you run Malwarebytes Endpoint Agent or Malwarebytes for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-29146: Malwarebytes Endpoint Agent integer overflow in hash calculation

Q: Is there a fix for CVE-2023-29146?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2023-29146 attacked?

It is attacked with local access, in a network appliance.

Q: Am I affected by CVE-2023-29146?

Check whether you run Malwarebytes Endpoint Agent or Malwarebytes for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-29146 · Severity: info · CVSS 8.2 · Published 2026-06-09

A vulnerability in Malwarebytes security software could allow attackers to bypass security detections. The software's mechanism for identifying files via cryptographic hashes fails when processing very large files (over 4GB), potentially allowing malicious files to be misidentified as safe. This could lead to a failure in threat detection, allowing malware to remain on a system undetected.

Vendors: Malwarebytes.

Quick answers

Is CVE-2023-29146 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-29146 being exploited in the wild.
How severe is CVE-2023-29146?: Informational severity, with a CVSS score of 8.2, published 9 June 2026.
Which products and versions are affected?: Malwarebytes Endpoint Agent < 1.1.64; Malwarebytes for Windows Update package version < 1.0.106875.
Is there a fix for CVE-2023-29146?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2023-29146 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2023-29146?: Check whether you run Malwarebytes Endpoint Agent or Malwarebytes for Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow (CWE-190) exists in the utility functions used for calculating cryptographic hashes in Malwarebytes Endpoint Agent for Linux and Malwarebytes for Windows v5. When processing data exceeding 4GB, the software truncates the data due to a 32-bit integer wrap-around. An attacker can exploit this by appending 4GB of data to a specific string to create a hash collision with a different, smaller string. This flaw can be leveraged to bypass security scanners and detection engines that rely on file hashing for identification. Patches are available in Endpoint Agent for Linux version 1.1.64 and Malwarebytes for Windows v5 update package 1.0.106875.

Affected products

Malwarebytes Endpoint Agent for Linux < 1.1.64
Malwarebytes Malwarebytes for Windows v5 Update package version < 1.0.106875

Timeline

2026-06-09: disclosed: NVD publication date
2026-06-09: advisory

References

https://www.malwarebytes.com/secure/cves/cve-2023-29146

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.