Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-04857
HistoryJan 11, 2024 - 12:00 a.m.

GTKWave out-of-bounds write vulnerability (CNVD-2024-04857)

2024-01-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
gtkwave
vulnerability
out-of-bounds write
code execution
attacker
.vcd files
version 3.3.115
gtk+

0.001 Low

EPSS

Percentile

24.1%

GTKWave is a full-featured, GTK±based waveform viewer from GTKWave. An out-of-bounds write vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .vcd files.

CPENameOperatorVersion
gtkwave gtkwaveeq3.3.115