CVE-2023-37575

Summary

CVE-2023-37575 is a newly discovered vulnerability affecting GTKWave 3.3.115. Multiple use-after-free errors exist within the VCD get_vartoken realloc functionality. A maliciously crafted .vcd file can exploit these vulnerabilities, resulting in arbitrary code execution. The issue arises during the GUI's interactive VCD parsing process, potentially putting users at risk if they open a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.