CVE-2023-37420

CVE-2023-37420 affects GTKWave, a waveform viewer for VCD files. The vulnerability is an out-of-bounds write in the VCD parse_valuechange portdump path, exploitable when a victim opens a crafted .vcd file (via the vcd2lxt conversion utility), potentially enabling arbitrary code execution. Affecte...

CVE-2023-37416

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37417

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37417

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37418

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37419

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37420

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37416

GTKWave contains multiple out-of-bounds write vulnerabilities in the VCD parse_valuechange portdump code path (affecting GTKWave 3.3.115). Exploitation requires opening a crafted .vcd file, potentially leading to arbitrary code execution with local access. Public advisories (Debian, Debian LTS, a...

CVE-2023-37417

CVE-2023-37417 affects GTKWave (vcd parse_valuechange in the GUI) with multiple out-of-bounds writes in version 3.3.115, allowing arbitrary code execution when a malicious .vcd file is opened. Debian and Debian LTS advisories (DSA-5653/ DLA-3785) indicate fixes in GTKWAVE to newer upstream versio...

CVE-2023-37420

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37418

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37416

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37418

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37420

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37416

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37419

CVE-2023-37419 affects GTKWave up to version 3.3.115, with multiple out-of-bounds write vulnerabilities in the VCD parse_valuechange portdump path. A specially crafted .vcd file can trigger arbitrary code execution when opened, specifically via the vcd2lxt2 conversion utility. The incident is des...

CVE-2023-37419

Multiple out-of-bounds write vulnerabilities exist in the VCD parsevaluechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns t...

CVE-2023-37442

GTKWave 3.3.115 contains multiple out-of-bounds read vulnerabilities in the VCD var definition section exposed when opening a malicious .vcd file, potentially enabling arbitrary code execution. CVE-2023-37442 is associated with these issues. Debian/DSA-5653 and DLA-3785 note fixes across Debian r...

CVE-2023-37443

CVE-2023-37443 affects GTKWave, where multiple out-of-bounds reads in the VCD var definition section (GUI legacy VCD parser) can lead to arbitrary code execution when a malicious .vcd file is opened. Affected product is GTKWave 3.3.115. Reports and advisories indicate the issue was addressed by u...

CVE-2023-37445

CVE-2023-37445 affects GTKWave, where multiple out-of-bounds reads in the VCD var definition handling could allow code execution when a malformed .vcd is opened; the description also mentions an out-of-bounds write via the vcd2vzt conversion utility. Debian and Debian-based advisories have fixed ...