CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38650

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38653

CVE-2023-38653 affects GTKWave’s gtkwave viewer (VZT/dict parsing). A vulnerability in the vzt_rd_block_vch_decode path can cause memory corruption via integer overflow when parsing crafted .vzt files; specifically when num_time_ticks is zero. Exploitation requires opening a malicious file, enabl...

CVE-2023-38652

CVE-2023-38652 affects GTKWave up to versions around 3.3.115, where multiple integer overflow vulnerabilities exist in the VZT block dictionary parsing (vzt_rd_block_vch_decode). A crafted .vzt file can trigger memory corruption when num_time_ticks is non-zero, enabling a local impact as describe...

CVE-2023-38650

CVE-2023-38650 affects GTKWave up to versions around 3.3.118 where the VZT modelo parser (vzt_rd_block_vch_decode) can overflow when num_time_ticks is non-zero, leading to memory corruption after opening a malicious .vzt file. Public advisories indicate multiple vendor stacks (Debian, Fedora) hav...

CVE-2023-38651

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-38652

Multiple integer overflow vulnerabilities exist in the VZT vztrdblockvchdecode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the...

CVE-2023-39234

GTKWave’s CVE-2023-39234 affects the VZT autosort path in the vzt_rd_process_block function, triggering out-of-bounds writes by iterating over lt->numrealfacs. This can allow arbitrary code execution when a user opens a crafted .vzt file. Public references indicate the issue exists in GTKWave ...

CVE-2023-39235

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-39234

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-39234

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-35004

An integer overflow vulnerability exists in the VZT longestlen value allocation functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

CVE-2023-39235

CVE-2023-39235 pertains to GTKWave, where multiple out-of-bounds write vulnerabilities exist in the VZT autosort path (vzt_rd_process_block) of GTKWave 3.3.115. The flaw occurs when iterating over lt->num_time_ticks, and could allow arbitrary code execution if a malicious .vzt file is opened. ...

GTKWave VZT longest_len value allocation integer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1816 GTKWave VZT longestlen value allocation integer overflow vulnerability January 8, 2024 CVE Number CVE-2023-35004 SUMMARY An integer overflow vulnerability exists in the VZT longestlen value allocation functionality of GTKWave 3.3.115. A specially crafted...

GTKWave 缓冲区错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An out-of-bounds write vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause arbitrary code execution via specially crafted .vzt files...

GTKWave 输入验证错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An integer overflow vulnerability exists in GTKWave version 3.3.115, which can be exploited by an attacker to cause memory corruption via specially crafted .vzt files...

PT-2024-12604 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: An out-of-bounds write issue exists in the VZT LZMA Read dmem extraction functionality. This can be triggered by a specially crafted .vzt file, potentially leading to arbitrary code execution. A victim wou...

PT-2024-12747 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious fil...

PT-2024-12753 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: Multiple integer overflow vulnerabilities exist in the VZT vzt rd block vch decode dict parsing functionality. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a...

GTKWave 安全漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. An out-of-bounds write vulnerability exists in GTKWave version 3.3.115. The vulnerability stems from an out-of-bounds write to the VZT vztrdgetfacname decompression function, which can be exploited by an attacker to cause...