CVE-2023-39235

Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns...

CVE-2023-39235

CVE-2023-39235 pertains to GTKWave, where multiple out-of-bounds write vulnerabilities exist in the VZT autosort path (vzt_rd_process_block) of GTKWave 3.3.115. The flaw occurs when iterating over lt->num_time_ticks, and could allow arbitrary code execution if a malicious .vzt file is opened. ...

GTKWave VZT vzt_rd_process_block autosort out-of-bounds write vulnerabilities

Talos Vulnerability Report TALOS-2023-1817 GTKWave VZT vztrdprocessblock autosort out-of-bounds write vulnerabilities January 8, 2024 CVE Number CVE-2023-39235,CVE-2023-39234 SUMMARY Multiple out-of-bounds write vulnerabilities exist in the VZT vztrdprocessblock autosort functionality of GTKWave...