CVE-2023-35997

Summary

CVE-2023-35997 is a vulnerability affecting GTKWave 3.3.115, where multiple improper array index validations exist in the fstReaderIterBlocks2 tdelta functionality. A maliciously crafted .fst file can exploit these vulnerabilities, resulting in arbitrary code execution. This issue arises when signal_lens is set to 2 or more. Users opening malicious files can be adversely affected, making this a potential serious threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.