CVE-2023-37923

Summary

CVE-2023-37923 is a newly disclosed vulnerability affecting GTKWave 3.3.115, an open-source waveform viewer. This issue involves multiple arbitrary write vulnerabilities within the VCD sorted bsearch functionality of the software. A maliciously crafted .vcd file can exploit these vulnerabilities, leading to arbitrary code execution. To trigger the issue, a victim must open a specially designed file. This vulnerability poses a significant concern when using the vcd2lxt conversion utility.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.