Lucene search
+L

240 matches found

CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•12 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00436EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•16 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.118 suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.1AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•15 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause memory corruption via specially crafted .fst files...

7.8CVSS7.1AI score0.0038EPSS
SaveExploits1References2
Talos
Talos
•added 2024/01/08 12:00 a.m.•50 views

GTKWave FST fstReaderIterBlocks2 chain_table allocation integer overflow vulnerabilities

Talos Vulnerability Report TALOS-2023-1798 GTKWave FST fstReaderIterBlocks2 chaintable allocation integer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-36915,CVE-2023-36916 SUMMARY Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chaintable allocation...

7.8CVSS7.5AI score0.00432EPSS
SaveExploits2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•17 views

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A code execution vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to potentially cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.7AI score0.00432EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•18 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•9 views

PT-2024-12502 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An integer overflow vulnerability exists in the fstReaderIterBlocks2 time table tsec nitems functionality. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicio...

7.8CVSS7.9AI score0.01481EPSS
SaveExploits82References135
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•22 views

PT-2024-12545 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to improper array index validation in the fstReaderIterBlocks2 tdelta functionality. A specially crafted .fst file can lead to arbitrary code execution when opened by a victim. The...

7.8CVSS8.1AI score0.01481EPSS
SaveExploits82References131
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•18 views

PT-2024-12583 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 and fstWritex len functionality. These vulnerabilities can be triggered by a specially crafted .fst...

7.8CVSS8.3AI score0.01481EPSS
SaveExploits82References131
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•6 views

PT-2024-12508 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a maliciou...

7.8CVSS8.5AI score0.01481EPSS
SaveExploits82References134
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•20 views

PT-2024-12544 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to improper array index validation in the fstReaderIterBlocks2 tdelta functionality. A specially crafted .fst file can lead to arbitrary code execution when opened by a victim. The...

7.8CVSS8AI score0.01481EPSS
SaveExploits82References131
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•2 views

CVE-2023-35958: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•1 views

CVE-2023-35704: Stack-based Buffer Overflow

Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

7.8CVSS8.1AI score0.00435EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•20 views

GTKWave 操作系统命令注入漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave version 3.3.118 suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS8.3AI score0.01481EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•16 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•21 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.118, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.0038EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•21 views

GTKWave 安全漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. A buffer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .fst files...

7.8CVSS8AI score0.00435EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•22 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00414EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•1 views

CVE-2023-36864: Integer Overflow or Wraparound

An integer overflow vulnerability exists in the fstReaderIterBlocks2 tempsignalvaluebuf allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

7.8CVSS7.8AI score0.00414EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•38 views

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

7.8CVSS7.9AI score0.00372EPSS
SaveExploits1References2
Rows per page
Query Builder