CVE-2023-35956

Summary

CVE-2023-35956 is a serious vulnerability affecting GTKWave 3.3.115, where multiple heap-based buffer overflows can be exploited in the fstReaderIterBlocks2 VCDATA parsing functionality. A maliciously crafted .fst file can cause arbitrary code execution, compromising the system. The decompression function `fastlz_decompress` is the culprit, increasing the urgency for a patch to mitigate this risk. Users are advised to avoid opening untrusted .fst files until a fix is available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.