Vulnerabilities (CVE)

Filtered by vendor Gtkwave Subscribe
Filtered by product Gtkwave
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-34087 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-34436 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-35004 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-32650 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-35992 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-36861 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-35128 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-35057 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-35989 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-38583 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-36864 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-37282 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVE-2023-38657 1 Gtkwave 1 Gtkwave 2024-01-10 N/A 7.8 HIGH
An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.