19926 matches found
CVE-2023-35958
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...
CVE-2023-35957
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...
CVE-2023-35956
CVE-2023-35956 affects GTKWave up to version 3.3.115, with multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 VCDATA parsing path. The underlying cause is in fastlz_decompress used during .fst decompression, allowing arbitrary code execution when a specially crafted f...
CVE-2023-35955
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...
CVE-2023-35957
CVE-2023-35957 affects GTKWave prior to 3.3.118 (e.g., 3.3.115) where multiple heap-based buffer overflows exist in the fstReaderIterBlocks2 VCDATA parsing functionality. A victim must open a specially crafted .fst file, triggering the vulnerability in the decompression function uncompress and po...
CVE-2023-35958
GTKWave 3.3.115 is affected by multiple heap-based buffer overflows in the fstReaderIterBlocks2 VCDATA parsing path. The vulnerability (CVE-2023-35958) allows arbitrary code execution when a malicious .fst file is opened, related to the copy function fstFread. Patches upgrade GTKWave to 3.3.118 s...
CVE-2023-35955
Summary (CVE-2023-35955) : GTKWave, a waveform viewer, contains multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 VCDATA parsing path. The flaws are triggered by parsing a malformed .fst file, potentially allowing arbitrary code execution via the LZ4_decompress_safe_...
CVE-2023-35956
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerabili...
CVE-2023-35970
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chaintable parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...
CVE-2023-35969
GTKWave 3.3.115 is affected by multiple heap-based buffer overflow flaws in the fstReaderIterBlocks2 chain_table parsing (FST_BL_VCDATA and FST_BL_VCDATA_DYN_ALIAS), which can lead to arbitrary code execution when a crafted .fst file is opened. Local attacker with user interaction is required. Re...
CVE-2023-35969
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chaintable parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This...
CVE-2023-36747
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...
CVE-2023-36747
CVE-2023-36747 is tied to GTKWave (gtkwave) and corresponds to multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 fstWritex len handling, triggered when beg_time does not align with the time table. Public sources in connected documents indicate the issue affects GTKWa...
CVE-2023-36746
GTKWave 3.3.x is affected by multiple heap-based buffer overflow vulnerabilities in the fstReaderIterBlocks2 fstWritex len handling when parsing the time table of .fst files. A crafted .fst file can trigger memory corruption, with local access required and user interaction (opening the file). Aff...
squid-cache: Squid Buffer Overflow
A heap-based buffer overflow flaw was found in the Squid caching proxy. When processing the Uniform Resource Name URNs, specific conditions can lead to remote code execution...
GTKWave FST fstReaderIterBlocks2 fstWritex len heap-based buffer overflow vulnerabilities
Talos Vulnerability Report TALOS-2023-1793 GTKWave FST fstReaderIterBlocks2 fstWritex len heap-based buffer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-36747,CVE-2023-36746 SUMMARY Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len...
GTKWave FST fstReaderIterBlocks2 VCDATA parsing heap-based buffer overflow vulnerabilities
Talos Vulnerability Report TALOS-2023-1785 GTKWave FST fstReaderIterBlocks2 VCDATA parsing heap-based buffer overflow vulnerabilities January 8, 2024 CVE Number CVE-2023-35956,CVE-2023-35957,CVE-2023-35958,CVE-2023-35955 SUMMARY Multiple heap-based buffer overflow vulnerabilities exist in the...
QNAP QTS / QuTS hero Vulnerability in Netatalk (QSA-23-22)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-22 advisory. - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this...
