CVE-2023-38618

Summary

CVE-2023-38618 is a critical vulnerability affecting GTKWave 3.3.115, where multiple integer overflow issues exist in the VZT facgeometry parsing functionality. These vulnerabilities can be triggered by a maliciously crafted .vzt file, leading to arbitrary code execution. The vulnerability specifically stems from an integer overflow occurrence during the allocation of the `rows` array. Successful exploitation necessitates a victim opening the malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.