CVE-2023-37578
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 416
Summary
CVE-2023-37578 is a serious vulnerability affecting GTKWave 3.3.115. Multiple use-after-free issues are present in the VCD get_vartoken realloc functionality. A maliciously crafted .vcd file can exploit these vulnerabilities, potentially leading to arbitrary code execution. The risk is heightened when using the vcd2lxt conversion utility, which requires opening a suspect file to activate the flaw.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share