CVE-2023-39270

Summary

CVE-2023-39270 is a newly disclosed vulnerability affecting GTKWave 3.3.115. The issue stems from multiple integer overflow vulnerabilities found in the LXT2 facgeometry parsing functionality. Malicious .lxt2 files can exploit these weaknesses, leading to arbitrary code execution. Triggering the issue necessitates opening a specially crafted file. In particular, the integer overflow occurs when allocating the `rows` array in the LXT2 facgeometry parsing process.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.