1371 matches found
CVE-2023-36861
CVE-2023-36861 describes an out-of-bounds write in the VZT LZMA_read_varint function of GTKWave 3.3.115. A victim must open a crafted .vzt file to trigger the vulnerability, which can lead to arbitrary code execution. The description notes local access is required (attack vector: local) with user...
CVE-2023-37282
An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-37282
An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-36861
An out-of-bounds write vulnerability exists in the VZT LZMAreadvarint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-37282
An out-of-bounds write vulnerability exists in the VZT LZMARead dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2023-38619
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38622
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38620
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38620
The CVE-2023-38620 entry affects GTKWave (gtkwave) waveform viewer, specifically the VZT facgeometry parsing path. A vulnerability exists in the allocation of the lsb array during parsing, causing integer overflow that can enable arbitrary code execution when a crafted .vzt file is opened. Impact...
CVE-2023-38622
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38623
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38622
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38623
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38621
Summary: CVE-2023-38621 affects GTKWave up to 3.3.115, where an overflow in the VZT facgeometry parsing code (allocating the flags array) can allow arbitrary code execution if a victim opens a malicious .vzt file. This is a local impact vulnerability reported with a high severity. Affected compon...
CVE-2023-38620
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38620
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38621
Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the intege...
CVE-2023-38623
GTKWave’s CVE-2023-38623 affects the VZT facgeometry parsing: multiple integer overflow vulnerabilities during allocation of the vindex_offset array can lead to arbitrary code execution when a malformed .vzt file is opened. The CVE entry lists a local attacker with user interaction required (open...
CVE-2023-38622
CVE-2023-38622 affects GTKWave 3.3.115: multiple integer overflow vulnerabilities in the VZT facgeometry parsing code, specifically when allocating the len array. A crafted .vzt file can trigger arbitrary code execution upon opening the file. The CVE has a CVSS v3.1 base score of 7.8 (HIGH) with ...
CVE-2023-38619
GTKWave 3.3.115 contains multiple integer overflow flaws in the VZT facgeometry parser that can overflow when allocating the msb array, enabling arbitrary code execution if a crafted .vzt file is opened. Public details in the CVE entry state the vulnerability is triggered by opening a malicious f...