Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-34087
HistoryJan 08, 2024 - 3:15 p.m.

Input validation

2024-01-0815:15:00
PRIOn knowledge base
www.prio-n.com
8
array index validation
evcd var len parsing
arbitrary code execution
malicious file
vulnerability

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.1%

An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

CPENameOperatorVersion
gtkwaveeq3.3.115

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

24.1%