CVE-2023-36746

Summary

CVE-2023-36746 is a buffer overflow vulnerability affecting GTKWave 3.3.115. Multiple heap-based issues are identified in the `fstReaderIterBlocks2` function's `fstWritex len` handling during time table parsing. A maliciously crafted .fst file can cause memory corruption, potentially leading to arbitrary code execution if a victim opens the malicious file. This security flaw puts users at risk, emphasizing the importance of updating GTKWave to a patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.