CVE-2023-34087

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 119

Summary

CVE-2023-34087 is a vulnerability affecting GTKWave 3.3.115. This issue involves improper array index validation in the EVCD var len parsing functionality, allowing for arbitrary code execution. A malicious .evcd file is capable of triggering this vulnerability, requiring a victim to open the file for exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share