CVE-2023-35970

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 8, 2024
Updated: Jan 16, 2024
CWE ID 119
CWE ID 787

Summary

CVE-2023-35970 is a vulnerability that affects the GTKWave version 3.3.115 software. It is classified as a heap-based buffer overflow vulnerability and can be exploited through a specially crafted .fst file. If a victim opens this malicious file, it can lead to arbitrary code execution. The vulnerability specifically targets the chain_table of the FST_BL_VCDATA_DYN_ALIAS2 section type. The base severity of this vulnerability is rated as HIGH, with a base score of 7.8 out of 10. The impact includes high integrity and confidentiality impacts and requires user interaction for exploitation. The availability impact is also rated as high. To mitigate the risk, users are advised to update to a patched version of GTKWave to prevent potential code execution and unauthorized access to sensitive information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-35970 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options