CVE-2023-35995

7.8HIGH

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution.

Publicado: 1/8/2024Actualizado: 11/4/2025
Ver en NVDVer en MITRE

Descripción

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 1.

Análisis IAImpulsado por IA

Productos Afectados

tonybybellgtkwave
3.3.115

Referencias