CVE-2023-38623

Summary

CVE-2023-38623 is a critical vulnerability affecting GTKWave version 3.3.115. Multiple integer overflow issues have been identified within the VZT facgeometry parsing functionality. A maliciously crafted .vzt file can cause these vulnerabilities, potentially leading to arbitrary code execution. The integer overflow specifically occurs during the allocation of the `vindex_offset` array, posing a significant security risk for users who open malicious files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.