CVE-2023-38583

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 8, 2024
Updated: Apr 9, 2024
CWE ID 787
CWE ID 120

Summary

CVE-2023-38583 is a critical buffer overflow vulnerability affecting GTKWave version 3.3.115. The issue lies in the LXT2 lxt2_rd_expand_integer_to_bits function, which can be exploited by a specially crafted .lxt2 file. By sending this malicious file, an attacker can trigger arbitrary code execution. The vulnerability is particularly dangerous since it only requires a victim to open the file, making it a significant threat to GTKWave users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share