CVE-2023-38648

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdgetfacname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concer...

CVE-2023-38648

GTKWave 3.3.115 contains multiple out-of-bounds write vulnerabilities in the vzt_rd_get_facname decompression path. A crafted .vzt file can lead to arbitrary code execution when opened by a user. Affected component: GTKWave, version 3.3.115 (Windows/Linux packaging observed in Debian/Ubuntu advis...

CVE-2023-38651

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38650

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38650

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38651

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38650

CVE-2023-38650 affects GTKWave up to versions around 3.3.118 where the VZT modelo parser (vzt_rd_block_vch_decode) can overflow when num_time_ticks is non-zero, leading to memory corruption after opening a malicious .vzt file. Public advisories indicate multiple vendor stacks (Debian, Fedora) hav...

CVE-2023-38653

CVE-2023-38653 affects GTKWave’s gtkwave viewer (VZT/dict parsing). A vulnerability in the vzt_rd_block_vch_decode path can cause memory corruption via integer overflow when parsing crafted .vzt files; specifically when num_time_ticks is zero. Exploitation requires opening a malicious file, enabl...

CVE-2023-38652

CVE-2023-38652 affects GTKWave up to versions around 3.3.115, where multiple integer overflow vulnerabilities exist in the VZT block dictionary parsing (vzt_rd_block_vch_decode). A crafted .vzt file can trigger memory corruption when num_time_ticks is non-zero, enabling a local impact as describe...

CVE-2023-38653

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38651

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38650

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38651

GTKWave 3.3.115 contains multiple integer overflow vulnerabilities in the VZT interpreter (vzt_rd_block_vch_decode times parsing) that can cause memory corruption when handling a crafted .vzt file, specifically related to the case when num_time_ticks is zero. Exploitation requires opening a malic...

CVE-2023-39234

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-35004

An integer overflow vulnerability exists in the VZT longestlen value allocation functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-39235

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-39235

CVE-2023-39235 pertains to GTKWave, where multiple out-of-bounds write vulnerabilities exist in the VZT autosort path (vzt_rd_process_block) of GTKWave 3.3.115. The flaw occurs when iterating over lt->num_time_ticks, and could allow arbitrary code execution if a malicious .vzt file is opened. ...