CVE-2023-37922

GTKWave 3.3.115 contains multiple arbitrary write vulnerabilities in the VCD sorted bsearch path, which can lead to arbitrary code execution when a victim opens a crafted .vcd file (triggered via vcd2lxt2). Connected advisories confirm the issue and provide fixed versions: upgrading to upstream G...

CVE-2023-37922

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...

CVE-2023-37923

CVE-2023-37923 affects GTKWave (notably the VCD sorting/bsearch logic). Multiple arbitrary-write vulnerabilities exist in the VCD handling, with one variant triggered via the vcd2lxt conversion utility, potentially enabling arbitrary code execution when a crafted .vcd file is opened. Affected ver...

CVE-2023-37923

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...

CVE-2023-37921

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...

CVE-2023-37923

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...

CVE-2023-37922

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary...

CVE-2023-36861

CVE-2023-36861 describes an out-of-bounds write in the VZT LZMA_read_varint function of GTKWave 3.3.115. A victim must open a crafted .vzt file to trigger the vulnerability, which can lead to arbitrary code execution. The description notes local access is required (attack vector: local) with user...

CVE-2023-37282

GTKWave 3.3.115 is affected by CVE-2023-37282 due to an out-of-bounds write in the VZT LZMA_Read dmem extraction functionality. A specially crafted .vzt file can lead to arbitrary code execution when opened by a user. Several connected advisories confirm GTKWave-related fixes, with upstream/packa...

CVE-2023-36861

An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-36861

An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-37282

An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-37282

An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-36861

An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-37282

An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-38620

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38623

GTKWave’s CVE-2023-38623 affects the VZT facgeometry parsing: multiple integer overflow vulnerabilities during allocation of the vindex_offset array can lead to arbitrary code execution when a malformed .vzt file is opened. The CVE entry lists a local attacker with user interaction required (open...

CVE-2023-38619

Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...

CVE-2023-38620

The CVE-2023-38620 entry affects GTKWave (gtkwave) waveform viewer, specifically the VZT facgeometry parsing path. A vulnerability exists in the allocation of the lsb array during parsing, causing integer overflow that can enable arbitrary code execution when a crafted .vzt file is opened. Impact...

CVE-2023-38619

GTKWave 3.3.115 contains multiple integer overflow flaws in the VZT facgeometry parser that can overflow when allocating the msb array, enabling arbitrary code execution if a crafted .vzt file is opened. Public details in the CVE entry state the vulnerability is triggered by opening a malicious f...