CVE-2023-37416
CVSS V2 None
CVSS V3 None
Description
Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's legacy VCD parsing code.
Overview
- CVE ID
- CVE-2023-37416
- Assigner
- talos
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-01-08T14:47:53.311Z
- Last Modified Date
- 2024-01-08T18:00:14.022Z
Weakness Enumerations
References
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-37416 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-37416 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-06-25 00:48:33 | Added to TrackCVE |