CVE-2023-35996

Summary

CVE-2023-35996 is a vulnerability affecting GTKWave 3.3.115, where multiple improper array index validations exist within the fstReaderIterBlocks2 tdelta functionality. A maliciously crafted .fst file can exploit these vulnerabilities and result in arbitrary code execution. The issue arises when signal_lens is equal to zero, potentially putting users at risk if they open a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.