CVE-2023-37922

Summary

CVE-2023-37922 is a critical vulnerability affecting GTKWave 3.3.115. The issue lies in the VCD sorted bsearch functionality, which allows for multiple arbitrary writes. An attacker can craft a malicious .vcd file to exploit this weakness, leading to arbitrary code execution. Triggering this vulnerability requires a victim to open the malicious file using the vcd2lxt2 conversion utility.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.