CVE-2023-37921

Summary

CVE-2023-37921 is a serious vulnerability affecting GTKWave 3.3.115, as multiple arbitrary write vulnerabilities have been identified in its VCD sorted bsearch functionality. A maliciously crafted .vcd file is capable of exploiting these weaknesses, potentially leading to arbitrary code execution. Triggering these vulnerabilities requires a victim to open a malicious file, posing a significant threat to users who handle such files. This issue is particularly concerning as it can be leveraged through the vcd2vzt conversion utility.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.