CVE-2023-35703

Summary

CVE-2023-35703 is a critical vulnerability affecting GTKWave 3.3.115. Multiple stack-based buffer overflows are identified in the FST LEB128 varint functionality. A maliciously crafted .fst file can exploit these vulnerabilities, resulting in arbitrary code execution. The fstReaderVarint64 function is the specific component affected by these stack-buffer overflows. A victim must open a malicious file to trigger this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.