CVE-2023-38653

Summary

CVE-2023-38653 is a vulnerability affecting GTKWave 3.3.115, where multiple integer overflow issues are identified in the vzt_rd_block_vch_decode functionality of its VZT files. A maliciously crafted .vzt file can cause memory corruption if num_time_ticks is input as zero, exposing the system to potential memory corruption attacks. Victims can only be affected if they open a malicious file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.