CVE-2023-38583
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 787
CWE ID 120
Summary
CVE-2023-38583 is a critical buffer overflow vulnerability affecting GTKWave version 3.3.115. The issue lies in the LXT2 lxt2_rd_expand_integer_to_bits function, which can be exploited by a specially crafted .lxt2 file. By sending this malicious file, an attacker can trigger arbitrary code execution. The vulnerability is particularly dangerous since it only requires a victim to open the file, making it a significant threat to GTKWave users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share