CVE-2023-37444

Summary

CVE-2023-37444 is a serious vulnerability affecting GTKWave 3.3.115. Multiple out-of-bounds read issues have been identified in the VCD var definition section functionality. A maliciously crafted .vcd file can exploit these vulnerabilities, leading to arbitrary code execution. This risk arises when a user opens a specially designed file, making the GUI's interactive VCD parsing code a potential attack vector.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.