CVE-2023-37416

Summary

CVE-2023-37416 is a critical vulnerability affecting GTKWave 3.3.115. The issue stems from multiple out-of-bounds write vulnerabilities present in the parse_valuechange portdump functionality of this software. Maliciously crafted .vcd files can exploit these flaws, potentially leading to arbitrary code execution. To trigger the vulnerability, a user must open a specially designed file. This vulnerability poses a significant risk due to its potential for code execution and the fact that it is triggered through the graphical user interface's legacy VCD parsing code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.