Buffer Overflow

gtkwave is vulnerable to Buffer Overflow. The vulnerability is due to inadequate bounds checking in the fstFread copy function. This allows an attacker to execute arbitrary code by providing a maliciously crafted .fst file...

CVE-2023-35958

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

Heap overflow

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35958

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...

CVE-2023-35958

GTKWave 3.3.115 is affected by multiple heap-based buffer overflows in the fstReaderIterBlocks2 VCDATA parsing path. The vulnerability (CVE-2023-35958) allows arbitrary code execution when a malicious .fst file is opened, related to the copy function fstFread. Patches upgrade GTKWave to 3.3.118 s...