CVE-2023-37576

Summary

CVE-2023-37576 is a serious vulnerability affecting GTKWave 3.3.115. Multiple use-after-free issues have been identified in the VCD get_vartoken realloc functionality. A maliciously crafted .vcd file can exploit these vulnerabilities and result in arbitrary code execution. Triggering this vulnerability requires a victim to open a specially designed file with the vcd2vzt conversion utility.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.