CVE-2023-39443

Summary

CVE-2023-39443 is a critical vulnerability affecting GTKWave 3.3.115, where multiple out-of-bounds write issues are identified in the LXT2 parsing functionality. A maliciously crafted .lxt2 file can exploit these vulnerabilities, leading to arbitrary code execution. The prefix copy loop in the affected code performs the out-of-bounds write, putting users at risk if they open a malicious file. This vulnerability poses a significant threat and requires immediate attention from GTKWave users, as opening a malicious file could result in code injection and potential system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.