Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32 function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

Stack Based Buffer Overflow

gtkwave is vulnerable to Stack Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderVarint32WithSkip function. Crafted .fst files, allowing attackers to execute arbitrary code execution when opened by a victim...

DSA-5653-1 gtkwave - security update

Bulletin has no description...

Debian dsa-5653 : gtkwave - security update

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5653 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5653...

Arbitrary Write

gtkwave is vulnerable to Arbitrary Write. These vulnerabilities can be exploited via a specially crafted .vcd file, allows a victim would need to open the malicious file and potentially leading to arbitrary code execution...

Arbitrary Write

gtkwave is vulnerable to Arbitrary Write. These vulnerabilities can be exploited via a specially crafted .vcd file, allows a victim would need to open the malicious file and potentially leading to arbitrary code execution...

Arbitrary Write

gtkwave is vulnerable to Arbitrary Write. These vulnerabilities can be exploited via a specially crafted .vcd file, allows a victim would need to open the malicious file and potentially leading to arbitrary code execution...

Integer Overflow

gtkwave is vulnerable to an Integer Overflow. This vulnerability due to integer overflow via a specially crafted .fst file in the timetable tsecnitems functionality of the fstReaderIterBlocks2 module, allows a victim would need to open the malicious file...

Integer Overflow

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to an integer overflow in the value elements within its LXT2 lxt2rdtrace value elements allocation functionality Crafting a specially designed .lxt2 file can allows an unsuspecting victim must open the malicious file...

Integer Overflow

gtkwave is vulnerable to an Integer Overflow. The vulnerability is due to integer overflow within its VZT longestlen value allocation functionality in the .vzt file, allows an unsuspecting victim must open the malicious file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to inadequate bounds checking in the fstFread copy function. This allows an attacker to execute arbitrary code by providing a maliciously crafted .fst file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to insecure handling of decompression in the uncompress function. This allows an attacker to execute arbitrary code by providing a maliciously crafted .fst file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to insufficient input validation in the fastlzdecompress decompression function, allowing arbitrary code execution via a specially-crafted .fst file...

Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is caused due to insufficient input validation in the decompression function LZ4decompresssafepartial.This potentially leads to arbitrary code execution...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient validation of input during the decompression functionality while .ghw decompression, enabling attackers to execute arbitrary commands by crafting a malicious wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to insufficient input validation in the decompression functionality in vcdrecordermain, allowing attackers to execute arbitrary commands by crafting a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in vcdmain, enabling attackers to execute arbitrary commands through a specially crafted wave file...

OS Command Injection

gtkwave is vulnerable to OS Command Injection. The vulnerability is due to inadequate input validation in the decompression functionality in the vcd2lxt2 utility, allowing attackers to execute arbitrary commands by crafting a specially crafted wave file...

Heap Based Buffer Overflow

gtkwave is vulnerable to Heap Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderIterBlocks2 chaintable parsing functionality using chaintable of FSTBLVCDATA and FSTBLVCDATADYNALIAS , allowing attackers to execute arbitrary code by crafting a specially...

Heap Based Buffer Overflow

gtkwave is vulnerable to Heap Based Buffer Overflow. The vulnerability is due to insufficient bounds checking in the fstReaderIterBlocks2 chaintable parsing functionality using the chaintable of the FSTBLVCDATADYNALIAS2, allowing attackers to execute arbitrary code by crafting a specially crafted...