Linux Distros Unpatched Vulnerability : CVE-2023-39270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to...

Linux Distros Unpatched Vulnerability : CVE-2023-38619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to...

The vulnerability of the FST_BL_GEOM component in the VCD/EVCD GTKWave file viewing software allows a hacker to execute arbitrary code.

The vulnerability of the FSTBLGEOM component in the GTKWave virtualization software lies in pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the longest_len function in the VCD/EVCD GTKWave file viewing software allows a hacker to execute arbitrary code.

The vulnerability of the longestlen function in VCD/EVCD GTKWave software is related to integer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Integer Overflow

GTKWave 3.3.115 is vulnerable to an Integer overflow. The vulnerability is due to not allocating enough memory to stringlens array in LXT2 numdictentries functionality. A specially crafted .lxt2 file can lead to arbitrary code execution when opened by a victim...

Integer Overflow

GTKWave 3.3.115 is vulnerable to Integer Overflow. The vulnerability is due to not allocating enough memory to stringpointers array in the LXT2 numdictentries functionality. A specially crafted .lxt2 file can lead to arbitrary code execution when opened by a victim...

Out-of-bounds Write

GTKWave 3.3.115 is vulnerable to Out-of-bounds Write. The vulnerability is due to not checking upper bounds while looping over lt-numrealfacs in the VZT vztrdprocessblock autosort functionality. A specially crafted .vzt file can lead to arbitrary code execution when opened by a victim...

Out-of-bounds Write

GTKWave 3.3.115 is vulnerable to Out-of-bounds Write. The vulnerability is due to not checking upper bounds while looping over lt-numtimeticks in the VZT vztrdprocessblock autosort functionality. A specially crafted .vzt file can lead to arbitrary code execution when opened by a victim...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow during the allocation of the rows array, which can be triggered by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow when allocating the msb array, which can be exploited by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow when allocating the len array, which can be exploited by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow when allocating the value array, which can be exploited by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow when allocating the msb array, which can be exploited by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow when allocating the msb array, which can be exploited by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Use After Free

GTKWave is vulnerable to multiple use-after-free in the VCD getvartoken realloc functionality. The vulnerability is due to improper handling of memory deallocation, specifically when triggered via the GUI's legacy VCD parsing code, which can be exploited by opening a specially crafted .vcd file,...

Integer Overflow

GTKWave is vulnerable to Integer Overflow. The vulnerability is due to integer overflow when allocating the lsb array, which can be exploited by opening a specially crafted .lxt2 file, potentially leading to arbitrary code execution...

Use-After-Free

gtkwave is vulnerable to Use-After-Free. The vulnerability is due to improper memory management in the VCD getvartoken realloc functionality via the vcd2lxt conversion utility, allowing a specially crafted .vcd file to trigger arbitrary code execution...

Use-After-Free

gtkwave is vulnerable to Use-After-Free. The vulnerability is due to improper memory management in the VCD getvartoken realloc functionality via the vcd2lxt2 conversion utility, allowing an attacker to execute arbitrary code by crafting a malicious .vcd file...

Use-After-Free

gtkwave is vulnerable to Use-After-Free. The vulnerability is due to improper handling of memory reallocation in the VCD getvartoken function when triggered via the vcd2vzt conversion utility. It allows a specially crafted .vcd file can lead to arbitrary code execution...

Use-After-Free

gtkwave is vulnerable to Use-After-Free. The vulnerability is due to improper handling of memory reallocation in the VCD getvartoken function when triggered via the GUI's interactive VCD parsing code. It allows a specially crafted .vcd file can lead to arbitrary code execution...