EUVD-2026-125402

xschem 2.9.9 through 3.4.7 contains a heap out-of-bounds write vulnerability in readdataset in src/rawtovcd.c due to an unchecked variable index. Attackers can supply a crafted ngspice .raw file that, when converted with rawtovcd, writes file-controlled heap pointers at chosen signed offsets,...

CVE-2026-128990

The xschem versions 2.9.9 through 3.4.7 are affected by a heap out-of-bounds write vulnerability in the read_dataset() function within src/rawtovcd.c . This issue stems from an unchecked variable index , allowing an attacker to provide a crafted ngspice .raw file that, during conversion via rawto...