CVE-2023-35004
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 190
Summary
CVE-2023-35004 is an integer overflow vulnerability affecting GTKWave 3.3.115. This issue lies within the VZT longest_len value allocation functionality. A maliciously crafted .vzt file can exploit this vulnerability, resulting in arbitrary code execution. Triggering this vulnerability requires a victim to open a malicious file.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share