CVE-2023-38622

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38623

GTKWave’s CVE-2023-38623 affects the VZT facgeometry parsing: multiple integer overflow vulnerabilities during allocation of the vindex_offset array can lead to arbitrary code execution when a malformed .vzt file is opened. The CVE entry lists a local attacker with user interaction required (open...

CVE-2023-38623

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38622

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38620

The CVE-2023-38620 entry affects GTKWave (gtkwave) waveform viewer, specifically the VZT facgeometry parsing path. A vulnerability exists in the allocation of the lsb array during parsing, causing integer overflow that can enable arbitrary code execution when a crafted .vzt file is opened. Impact...

CVE-2023-38621

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38621

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38619

GTKWave 3.3.115 contains multiple integer overflow flaws in the VZT facgeometry parser that can overflow when allocating the msb array, enabling arbitrary code execution if a crafted .vzt file is opened. Public details in the CVE entry state the vulnerability is triggered by opening a malicious f...

CVE-2023-38623

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38621

Summary: CVE-2023-38621 affects GTKWave up to 3.3.115, where an overflow in the VZT facgeometry parsing code (allocating the flags array) can allow arbitrary code execution if a victim opens a malicious .vzt file. This is a local impact vulnerability reported with a high severity. Affected compon...

CVE-2023-38622

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38620

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38618

GTKWave 3.3.115 contains multiple integer overflow vulnerabilities in the VZT facgeometry parsing path (allocating the rows array), including CVE-2023-38618, which could allow arbitrary code execution when opening a crafted .vzt file. The issue is rooted in an overflow during allocation. Public a...

CVE-2023-38649

GTKWave: Multiple out-of-bounds write vulnerabilities in vz t_rd_get_facname decompression in GTKWave 3.3.115 can lead to arbitrary code execution when opening a crafted .vzt file. Debian security advisories show fixes upgrading to 3.3.118 (bullseye) or 3.3.118-0.1~deb12u1 (bookworm); i.e., upgra...

CVE-2023-38648

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...

CVE-2023-38618

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38648

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...

CVE-2023-38648

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...

CVE-2023-38649

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...

CVE-2023-38618

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...