CVE-2023-35970

Summary

CVE-2023-35970 is a critical vulnerability affecting GTKWave 3.3.115, where multiple heap-based buffer overflows have been identified in the fstReaderIterBlocks2 chain_table parsing functionality. These vulnerabilities can be triggered by a specially crafted .fst file, potentially leading to arbitrary code execution. The chain_table of the `FST_BL_VCDATA_DYN_ALIAS2` section type is the specific component of GTKWave that is impacted by these vulnerabilities. A victim must open a malicious file to exploit this weakness.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.