CVE-2023-38652

creationtimestamp| type| source ---|---|--- 2024-01-08 16:32:23+00:00| seen| https://t.me/ctinow/164466 2024-01-11 08:16:26+00:00| seen| https://t.me/ctinow/166342 2024-01-25 13:46:24+00:00| seen| https://t.me/ctinow/173438...

CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38652

CVE-2023-38652 affects GTKWave up to versions around 3.3.115, where multiple integer overflow vulnerabilities exist in the VZT block dictionary parsing (vzt_rd_block_vch_decode). A crafted .vzt file can trigger memory corruption when num_time_ticks is non-zero, enabling a local impact as describe...

CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

GTKWave VZT vzt_rd_block_vch_decode dict parsing integer overflow vulnerabilities

Talos Vulnerability Report TALOS-2023-1815 GTKWave VZT vztrdblockvchdecode dict parsing integer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-38653,CVE-2023-38652 SUMMARY Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of...