CVE-2023-39234

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-39234

GTKWave’s CVE-2023-39234 affects the VZT autosort path in the vzt_rd_process_block function, triggering out-of-bounds writes by iterating over lt->numrealfacs. This can allow arbitrary code execution when a user opens a crafted .vzt file. Public references indicate the issue exists in GTKWave ...

GTKWave VZT vzt_rd_process_block autosort out-of-bounds write vulnerabilities

Talos Vulnerability Report TALOS-2023-1817 GTKWave VZT vztrdprocessblock autosort out-of-bounds write vulnerabilities January 8, 2024 CVE Number CVE-2023-39235,CVE-2023-39234 SUMMARY Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave...