1207 matches found
CVE-2023-38623
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38620
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38622
CVE-2023-38622 affects GTKWave 3.3.115: multiple integer overflow vulnerabilities in the VZT facgeometry parsing code, specifically when allocating the len array. A crafted .vzt file can trigger arbitrary code execution upon opening the file. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with ...
CVE-2023-38623
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38619
GTKWave 3.3.115 contains multiple integer overflow flaws in the VZT facgeometry parser that can overflow when allocating the msb array, enabling arbitrary code execution if a crafted .vzt file is opened. Public details in the CVE entry state the vulnerability is triggered by opening a malicious f...
CVE-2023-38621
Summary: CVE-2023-38621 affects GTKWave up to 3.3.115, where an overflow in the VZT facgeometry parsing code (allocating the flags array) can allow arbitrary code execution if a victim opens a malicious .vzt file. This is a local impact vulnerability reported with a high severity. Affected compon...
CVE-2023-38620
The CVE-2023-38620 entry affects GTKWave (gtkwave) waveform viewer, specifically the VZT facgeometry parsing path. A vulnerability exists in the allocation of the lsb array during parsing, causing integer overflow that can enable arbitrary code execution when a crafted .vzt file is opened. Impact...
CVE-2023-38622
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38623
GTKWave’s CVE-2023-38623 affects the VZT facgeometry parsing: multiple integer overflow vulnerabilities during allocation of the vindex_offset array can lead to arbitrary code execution when a malformed .vzt file is opened. The CVE entry lists a local attacker with user interaction required (open...
CVE-2023-38622
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38620
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38621
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38649
Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...
CVE-2023-38648
Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...
CVE-2023-38648
Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...
CVE-2023-38648
GTKWave 3.3.115 contains multiple out-of-bounds write vulnerabilities in the vzt_rd_get_facname decompression path. A crafted .vzt file can lead to arbitrary code execution when opened by a user. Affected component: GTKWave, version 3.3.115 (Windows/Linux packaging observed in Debian/Ubuntu advis...
CVE-2023-38618
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38618
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38618
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38618
GTKWave 3.3.115 contains multiple integer overflow vulnerabilities in the VZT facgeometry parsing path (allocating the rows array), including CVE-2023-38618, which could allow arbitrary code execution when opening a crafted .vzt file. The issue is rooted in an overflow during allocation. Public a...