CVE-2023-35989

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 190

Summary

CVE-2023-35989 is an integer overflow vulnerability discovered in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. Maliciously crafted .lxt2 files can exploit this flaw, leading to arbitrary code execution. The vulnerability can be triggered if a user opens a malicious file, making it a potential threat to system security. This issue can result in serious consequences if exploited, emphasizing the importance of applying the available patch as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share