CVE-2023-37420

Summary

CVE-2023-37420 is a newly discovered vulnerability affecting GTKWave version 3.3.115. This issue involves multiple out-of-bounds write vulnerabilities in the parse_valuechange portdump functionality. A maliciously crafted .vcd file can exploit these vulnerabilities, resulting in arbitrary code execution. The risk is heightened when using the vcd2lxt conversion utility, as it can trigger the vulnerabilities. Users are advised to update their GTKWave installations to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.