CVE-2023-37445
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 119
Summary
CVE-2023-37445 is a serious vulnerability affecting GTKWave 3.3.115. Multiple out-of-bounds read vulnerabilities have been identified in the VCD var definition section functionality. A maliciously crafted .vcd file can exploit these weaknesses, potentially leading to arbitrary code execution. The risk is heightened when using the vcd2vzt conversion utility, making it essential for users to exercise caution when opening unverified files.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share