Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is zero.
References
Link | Resource |
---|---|
https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html | |
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815 | Exploit Third Party Advisory |
Configurations
History
09 Apr 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-08 15:15
Updated : 2024-04-09 21:15
NVD link : CVE-2023-38653
Mitre link : CVE-2023-38653
CVE.ORG link : CVE-2023-38653
JSON object : View
Products Affected
tonybybell
- gtkwave
CWE
CWE-190
Integer Overflow or Wraparound