CVE-2024-47195

Summary

CVE-2024-47195 is a vulnerability affecting ModelSim versions below V2024.3 and Questa versions below V2024.3. The issue lies in the gdb.exe component of these applications, which allows a maliciously crafted executable file to be loaded from the current working directory. An authenticated local attacker can leverage this vulnerability to inject arbitrary code and potentially escalate privileges in affected installations where administrators or high-privileged processes launch gdb.exe from a user-writable directory. This could pose a significant security risk to the targeted systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.