CVE-2023-37419

Summary

CVE-2023-37419 is a vulnerability affecting GTKWave 3.3.115, where multiple out-of-bounds write issues exist in the VCD parse_valuechange portdump functionality. A maliciously crafted .vcd file can exploit these vulnerabilities, leading to arbitrary code execution. The risk is heightened when using the vcd2lxt2 conversion utility, as it may trigger the vulnerabilities. Users are advised to update their GTKWave software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.