Integer Overflow

2024-04-0314:29:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

gtkwave

integer overflow

vulnerability

input validation

bounds checking

vzt vzt_rd_block_vch_decode

.vzt file

attackers

input parameters

num_time_ticks

software

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

Low

EPSS

0.001

Percentile

33.6%

JSON

gtkwave is vulnerable to Integer Overflow. The vulnerability is due to insufficient input validation and bounds checking within th VZT vzt_rd_block_vch_decode dictionary parsing functionality in .vzt file allow attackers to manipulate certain input parameters, particularly num_time_ticks.