CVE-2023-36864

GTKWave 3.3.115 is affected by an integer overflow in fstReaderIterBlocks2 temp_signal_value_buf allocation, allowing arbitrary code execution when a crafted .fst file is opened. Public advisories (Debian/ Fedora) indicate fixes in GTKWave 3.3.118 (or equivalent) across supported releases; upgrad...

CVE-2023-34087

An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-36915

Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chaintable allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...

CVE-2023-36915

Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chaintable allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...

CVE-2023-36915

CVE-2023-36915 affects GTKWave’s FST reader, specifically the chain_table allocation in fstReaderIterBlocks2, leading to multiple integer overflow vulnerabilities. A crafted .fst file can lead to arbitrary code execution when opened. Affected software/version: GTKWave 3.3.115. Exploitation requir...

CVE-2023-36916

CVE-2023-36916 affects GTKWave, specifically the FST reader’s chain_table allocation. Multiple integer overflow vulnerabilities in the chain_table_lengths allocation can lead to arbitrary code execution when a malformed .fst file is opened. Affected version: GTKWave 3.3.115 (and related builds). ...

CVE-2023-36915

Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chaintable allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...

CVE-2023-36916

Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chaintable allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...

CVE-2023-34087

An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-36916

Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chaintable allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...

CVE-2023-34087

CVE-2023-34087 affects GTKWave, where an improper array index validation in the EVCD var len parsing of GTKWave 3.3.115 can allow arbitrary code execution when opening a crafted .evcd file. Public sources identify the issue and several advisories list GTKWave upgrades (e.g., Debian fixes upgradin...

CVE-2023-37420

CVE-2023-37420 affects GTKWave, a waveform viewer for VCD files. The vulnerability is an out-of-bounds write in the VCD parse_valuechange portdump path, exploitable when a victim opens a crafted .vcd file (via the vcd2lxt conversion utility), potentially enabling arbitrary code execution. Affecte...

CVE-2023-37418

CVE-2023-37418 affects GTKWave, with multiple out-of-bounds write vulnerabilities in the VCD parse_valuechange portdump functionality (and related vcd2vzt conversion). A specially crafted VCD file can lead to arbitrary code execution when opened, per the initial entry and corroborating Debian/Fed...

CVE-2023-37416

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37417

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37417

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37420

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37419

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37416

GTKWave contains multiple out-of-bounds write vulnerabilities in the VCD parse_valuechange portdump code path (affecting GTKWave 3.3.115). Exploitation requires opening a crafted .vcd file, potentially leading to arbitrary code execution with local access. Public advisories (Debian, Debian LTS, a...

CVE-2023-37417

CVE-2023-37417 affects GTKWave (vcd parse_valuechange in the GUI) with multiple out-of-bounds writes in version 3.3.115, allowing arbitrary code execution when a malicious .vcd file is opened. Debian and Debian LTS advisories (DSA-5653/ DLA-3785) indicate fixes in GTKWAVE to newer upstream versio...