CVE-2023-37447

Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37445

Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37446

Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37442

GTKWave 3.3.115 contains multiple out-of-bounds read vulnerabilities in the VCD var definition section exposed when opening a malicious .vcd file, potentially enabling arbitrary code execution. CVE-2023-37442 is associated with these issues. Debian/DSA-5653 and DLA-3785 note fixes across Debian r...

CVE-2023-37446

CVE-2023-37446 affects GTKWave, a waveform viewer for VCD/LXT files. The issue is an out-of-bounds read/write in the VCD var definition handling, with a specific out-of-bounds write triggered via the vcd2lxt2 conversion utility, which could allow arbitrary code execution when a malformed/.vcd fil...

CVE-2023-37445

CVE-2023-37445 affects GTKWave, where multiple out-of-bounds reads in the VCD var definition handling could allow code execution when a malformed .vcd is opened; the description also mentions an out-of-bounds write via the vcd2vzt conversion utility. Debian and Debian-based advisories have fixed ...

CVE-2023-37447

CVE-2023-37447 affects GTKWave. The issue arises in the VCD var definition handling of GTKWave 3.3.115, where an out-of-bounds read (and related out-of-bounds write via the vcd2lxt conversion utility) in the VCD parsing path can allow arbitrary code execution when a malformed .vcd file is opened....

CVE-2023-37443

CVE-2023-37443 affects GTKWave, where multiple out-of-bounds reads in the VCD var definition section (GUI legacy VCD parser) can lead to arbitrary code execution when a malicious .vcd file is opened. Affected product is GTKWave 3.3.115. Reports and advisories indicate the issue was addressed by u...

CVE-2023-37445

Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37443

Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37444

GTKWave 3.3.115 contains multiple out-of-bounds read vulnerabilities in the VCD var definition section that can lead to arbitrary code execution when a crafted VCD file is opened via the GUI. Affected product: GTKWave; root cause: out-of-bounds reads in interactive VCD parsing. Impact: potential ...

CVE-2023-37442

Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37574

Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37578

Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37577

Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37577

CVE-2023-37577 covers multiple use-after-free vulnerabilities in GTKWave (GTKWave 3.3.115) affecting the VCD get_vartoken realloc path, specifically when triggered via the vcd2lxt2 conversion, enabling arbitrary code execution if a crafted .vcd file is opened. The impact is local with user intera...

CVE-2023-37578

GTKWave 3.3.115 contains multiple use-after-free bugs in the VCD get_vartoken realloc path, triggered by malformed .vcd files (notably via vcd2lxt), which can lead to arbitrary code execution. Debian/DSA-5653 and related advisories note these CVEs (including CVE-2023-37578) and fix them by upgrad...

CVE-2023-37573

CVE-2023-37573 affects GTKWave; multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc path used by the GUI recoder VCD parser. A crafted .vcd file can lead to arbitrary code execution. Public references confirm GTKWave 3.3.115 is affected and that upstream/packaged fixes e...

CVE-2023-37578

Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-37573

Multiple use-after-free vulnerabilities exist in the VCD getvartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...