CVE-2023-35703

CVE-2023-35703 affects GTKWave up to version 3.3.115 where the FST LEB128 varint handling (fstReaderVarint64) can overflow the stack via a crafted .fst file, enabling arbitrary code execution. Connected sources indicate fixes in GTKWave 3.3.118 (Debian bullseye: 3.3.104+...; Debian bookworm: 3.3....

CVE-2023-35703

Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-35704

CVE-2023-35704 affects GTKWave, a waveform viewer for VCD files. The vulnerability stems from the FST LEB128 varint handling in the function fstReaderVarint32WithSkip , causing stack-based buffer overflow that can enable arbitrary code execution when opening a crafted .fst file. The CVE is associ...

CVE-2023-35703

Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-35702

Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-35702

Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-35702

GKWave / GTKWave vulnerability (CVE-2023-35702) : Multiple stack-based buffer overflows exist in the FST LEB128 varint handling (fstReaderVarint32) of GTKWave up to version 3.3.115. A crafted .fst file can trigger arbitrary code execution when opened by a user. Connected advisories confirm the is...

CVE-2023-35958

GTKWave 3.3.115 is affected by multiple heap-based buffer overflows in the fstReaderIterBlocks2 VCDATA parsing path. The vulnerability (CVE-2023-35958) allows arbitrary code execution when a malicious .fst file is opened, related to the copy function fstFread. Patches upgrade GTKWave to 3.3.118 s...

CVE-2023-35956

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35958

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35964

Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression...

CVE-2023-35964

Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression...

CVE-2023-35964

GTKWave 3.3.115 contains decompression flaws in vcd2lxt that can lead to arbitrary code execution when a user opens a crafted wave file. CVE-2023-35964, rated HIGH (CVSS 7.8), requires local access and user interaction. The issue affects GTKWave, with Debian advisories noting fixes in 3.3.118+ (D...

CVE-2023-35957

CVE-2023-35957 affects GTKWave prior to 3.3.118 (e.g., 3.3.115) where multiple heap-based buffer overflows exist in the fstReaderIterBlocks2 VCDATA parsing functionality. A victim must open a specially crafted .fst file, triggering the vulnerability in the decompression function uncompress and po...

CVE-2023-35956

CVE-2023-35956 affects GTKWave up to version 3.3.115, with multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 VCDATA parsing path. The underlying cause is in fastlz_decompress used during .fst decompression, allowing arbitrary code execution when a specially crafted f...

CVE-2023-35957

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35957

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35955

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35955

Summary (CVE-2023-35955) : GTKWave, a waveform viewer, contains multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 VCDATA parsing path. The flaws are triggered by parsing a malformed .fst file, potentially allowing arbitrary code execution via the LZ4_decompress_safe_...

CVE-2023-35955

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...