1207 matches found
CVE-2023-39270
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39274
CVE-2023-39274 refers to multiple integer overflow vulnerabilities in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. The overflow occurs during allocation of the len array, and a specially crafted .lxt2 file can lead to arbitrary code execution when opened by a user. Affected prod...
CVE-2023-39270
CVE-2023-39270 affects GTKWave’s LXT2 facgeometry parser. The issue is multiple integer overflow vulnerabilities during rows allocation in GTKWave 3.3.115, which could allow arbitrary code execution when a crafted .lxt2 file is opened. Debian and Debian LTS advisories (DSA-5653-1/ DLA-3785-1) doc...
CVE-2023-39272
CVE-2023-39272 affects GTKWave, specifically the LXT2 facgeometry parsing path, where an integer overflow when allocating the “lsb” array can enable arbitrary code execution when a crafted .lxt2 file is opened. The issue is documented for GTKWave 3.3.115; exploitation is triggered by opening a ma...
CVE-2023-39272
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39274
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39271
CVE-2023-39271 affects GTKWave (LXT2 facgeometry parsing) where an integer overflow during msb array allocation in the parser can lead to arbitrary code execution when a user opens a crafted .lxt2 file. This is documented across Debian security advisories and Nessus/OpenVAS outputs, which indicat...
CVE-2023-39270
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39273
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39275
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39271
Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...
CVE-2023-39317
CVE-2023-39317 concerns GTKWave, a waveform viewer. The issue stems from multiple integer overflow vulnerabilities in the LXT2 num_dict_entries allocation (string_lens array) in GTKWave 3.3.115, which could allow arbitrary code execution when a user opens a malformed .lxt2 file. Public disclosure...
CVE-2023-34436
An out-of-bounds write vulnerability exists in the LXT2 numtimetableentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-34436
CVE-2023-34436 affects GTKWave up to version 3.3.115, where an out-of-bounds write in the LXT2 num_time_table_entries handling allows arbitrary code execution when opening a crafted .lxt2 file. The issue is mitigated by upgrading GTKWave to a newer upstream version (e.g., 3.3.118 and later); Debi...
CVE-2023-39316
Multiple integer overflow vulnerabilities exist in the LXT2 numdictentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer...
CVE-2023-39317
Multiple integer overflow vulnerabilities exist in the LXT2 numdictentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer...
CVE-2023-34436
An out-of-bounds write vulnerability exists in the LXT2 numtimetableentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-39317
Multiple integer overflow vulnerabilities exist in the LXT2 numdictentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer...
CVE-2023-39316
Multiple integer overflow vulnerabilities exist in the LXT2 numdictentries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer...
CVE-2023-39316
The CVE-2023-39316 entry concerns GTKWave, a waveform viewer. Concrete details in connected documents show: GTKWave 3.3.115 is affected by multiple integer overflow vulnerabilities in the LXT2 num_dict_entries path (allocating the string_pointers array), enabling arbitrary code execution when a m...