Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-37577
HistoryJan 08, 2024 - 3:15 p.m.

Design/Logic Flaw

2024-01-0815:15:00
PRIOn knowledge base
www.prio-n.com
3
use-after-free
gtkwave
arbitrary code execution
vcd
vulnerability
malicious file
nvd

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.2%

Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2lxt2 conversion utility.

CPENameOperatorVersion
gtkwaveeq3.3.115

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.2%