CVE-2023-39271
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 190
Summary
CVE-2023-39271 is a newly discovered vulnerability affecting GTKWave 3.3.115. It involves multiple integer overflow issues in the LXT2 facgeometry parsing functionality. A maliciously crafted .lxt2 file can exploit these vulnerabilities to execute arbitrary code. The integer overflow occurs during the allocation of the 'msb' array, posing a serious threat for victims who open malicious files.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share