CVE-2023-36861

Summary

CVE-2023-36861 is a newly discovered vulnerability affecting GTKWave version 3.3.115. This issue involves an out-of-bounds write in the VZT LZMA_read_varint functionality. A maliciously crafted .vzt file can exploit this vulnerability, resulting in arbitrary code execution. The user must open a malicious file to trigger this vulnerability, making it a potential threat through social engineering or phishing attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.