CVE-2023-35995

7.8HIGH

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution.

Published: 1/8/2024Updated: 11/4/2025
View on NVDView on MITRE

Description

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 1.

AI AnalysisPowered by AI

Affected Products

tonybybellgtkwave
3.3.115

References