CVE-2023-38622

Summary

CVE-2023-38622 is a newly disclosed vulnerability affecting GTKWave version 3.3.115. Multiple integer overflow issues were identified in the VZT facgeometry parsing functionality. A maliciously crafted .vzt file can exploit these vulnerabilities, resulting in arbitrary code execution. The integer overflow occurs as the 'len' array is being allocated, posing a significant risk to users who open susceptible files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.