CVE-2023-39444

Summary

CVE-2023-39444 is a critical vulnerability affecting GTKWave 3.3.115. Multiple out-of-bounds write issues have been identified in the LXT2 parsing functionality of this software. A maliciously crafted .lxt2 file can exploit these vulnerabilities, leading to arbitrary code execution. The vulnerability arises due to a string copy loop performing an out-of-bounds write. To trigger the issue, a user must open a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.