CVE-2023-35128

Summary

CVE-2023-35959 is a critical vulnerability affecting GTKWave 3.3.115. The issue involves multiple OS command injection flaws in the software's decompression functionality. A maliciously crafted .ghw file can exploit these vulnerabilities, resulting in arbitrary command execution. A victim must open a malicious file to trigger the vulnerabilities, posing a potential threat if users open unverified files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.