CVE-2023-38652

Summary

CVE-2023-38652 is a vulnerability that affects GTKWave version 3.3.115. The vulnerability is related to integer overflow vulnerabilities in the VZT vzt_rd_block_vch_decode dict parsing functionality. Exploiting this vulnerability can lead to memory corruption when a specially crafted .vzt file is opened by a victim. The base severity of this vulnerability is rated as HIGH, with a base score of 7.0 according to the CVSS vector string CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. The potential danger it poses to an organization includes high impact on integrity and confidentiality, and requires user interaction to be exploited. Remediation for this vulnerability has not been provided in the given information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.