CVE-2023-38621

Summary

CVE-2023-38621 is a critical vulnerability affecting GTKWave 3.3.115. The issue lies in the VZT facgeometry parsing functionality where multiple integer overflows can occur. A maliciously crafted .vzt file can exploit this vulnerability and result in arbitrary code execution. The integer overflow specifically happens when allocating the `flags` array, posing a serious threat to users who open suspect files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.