CVE-2023-36864

Summary

CVE-2023-36864 is an integer overflow vulnerability discovered in GTKWave 3.3.115's fstReaderIterBlocks2 temp_signal_value_buf allocation functionality. Maliciously crafted .fst files can exploit this weakness, resulting in arbitrary code execution. The vulnerability is triggered when the victim opens a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.