Lucene search
K

8 matches found

CNVD
CNVD
added 2024/01/11 12:0 a.m.6 views

GTKWave integer overflow vulnerability (CNVD-2024-38185)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted .lxt2 file...

7.8CVSS7.5AI score0.00074EPSS
Exploits1References1
CNVD
CNVD
added 2024/01/11 12:0 a.m.12 views

GTKWave integer overflow vulnerability (CNVD-2024-39039)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause memory corruption using specially crafted .lxt2 files...

7.3CVSS7AI score0.00031EPSS
Exploits1References1
OSV
OSV
added 2024/01/08 3:15 p.m.7 views

CVE-2023-39443

Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115. A specially-crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds...

7.8CVSS8AI score
Exploits0References3
OSV
OSV
added 2024/01/08 3:15 p.m.4 views

CVE-2023-39414

Multiple integer underflow vulnerabilities exist in the LXT2 lxt2rditerradix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns th...

7.3CVSS7.6AI score
Exploits0References3
NVD
NVD
added 2024/01/08 3:15 p.m.19 views

CVE-2023-38657

An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

7.8CVSS7.8AI score0.00066EPSS
Exploits1References3
OSV
OSV
added 2024/01/08 3:15 p.m.6 views

CVE-2023-38583

A stack-based buffer overflow vulnerability exists in the LXT2 lxt2rdexpandintegertobits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability...

7.8CVSS7.9AI score
Exploits0References3
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.12 views

GTKWave 数字错误漏洞

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from an integer overflow vulnerability that can be exploited by an attacker to cause memory corruption using specially crafted .lxt2 files...

7.3CVSS7.2AI score0.00031EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.1 views

PT-2024-12792 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to multiple integer overflow vulnerabilities in the LXT2 facgeometry parsing functionality. A specially crafted .lxt2 file can lead to arbitrary code execution when opened by a victim...

7.8CVSS8.3AI score0.00154EPSS
Exploits82References131
Rows per page
Query Builder