CVE-2023-37442

Summary

CVE-2023-37442 is a serious vulnerability affecting GTKWave 3.3.115. It involves multiple out-of-bounds read issues in the VCD var definition section functionality. A maliciously crafted .vcd file can exploit these vulnerabilities, leading to arbitrary code execution. Triggering the vulnerabilities requires opening a malicious file through the application's default VCD parsing code. This issue poses a significant risk to users who handle .vcd files and could potentially be exploited for malicious purposes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.