CVE-2023-38650

Summary

CVE-2023-38650 is a vulnerability affecting GTKWave 3.3.115 where multiple integer overflow issues exist in the vzt_rd_block_vch_decode function. A maliciously crafted .vzt file can exploit these vulnerabilities, leading to memory corruption. The integer overflow occurs when the variable num_time_ticks is not zero, posing a threat to users who open malicious files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.