CVE-2023-35996

7.8HIGH

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution.

Publicado: 1/8/2024Atualizado: 11/4/2025
Ver no NVDVer no MITRE

Descrição

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 0.

Análise IADesenvolvido por IA

Produtos Afetados

tonybybellgtkwave
3.3.115

Referências