CVE-2023-38619

Summary

CVE-2023-38619 is a vulnerability affecting GTKWave 3.3.115, where multiple integer overflows exist in the VZT facgeometry parsing functionality. A maliciously crafted .vzt file can cause these overflows, resulting in arbitrary code execution. By exploiting the vulnerability, an attacker could gain control over the affected system, requiring a victim to open the malicious file for the exploit to take effect. The specific issue lies in the integer overflow occurring during the allocation of the 'msb' array.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.