CyberSecBulletin

GTKWave vulnerabilities

We track 82 vulnerabilities in GTKWave products. 82 are rated high or critical, and none are known to be exploited. The most recent was published on January 8, 2024.

82vulnerabilities
0critical
82high
0exploited
7.8average CVSS score

Latest GTKWave vulnerabilities

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-37444GTKWave

    Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilit

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-37443GTKWave

    Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilit

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-37442GTKWave

    Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilit

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-37420GTKWave

    Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnera

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-37419GTKWave

    Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnera

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-37418GTKWave

    Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnera

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-37417GTKWave

    Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnera

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-37416GTKWave

    Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnera

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-37282GTKWave

    An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-36916GTKWave

    Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-36915GTKWave

    Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-36864GTKWave

    An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-36861GTKWave

    An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-36747GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vul

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-36746GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vul

  • 7.8 High severity

    GTKWave: Improper Validation of Array Index

    CVE-2023-35997GTKWave

    Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger thes

  • 7.8 High severity

    GTKWave: Improper Validation of Array Index

    CVE-2023-35996GTKWave

    Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger thes

  • 7.8 High severity

    GTKWave: Improper Validation of Array Index

    CVE-2023-35995GTKWave

    Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger thes

  • 7.8 High severity

    GTKWave: Improper Validation of Array Index

    CVE-2023-35994GTKWave

    Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger thes

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-35992GTKWave

    An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious fi

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-35989GTKWave

    An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-35970GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trig

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-35969GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trig

  • 7.8 High severity

    GTKWave: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35964GTKWaveEPSS 1.48%

    Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This

  • 7.8 High severity

    GTKWave: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35963GTKWaveEPSS 1.48%

    Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This

  • 7.8 High severity

    GTKWave: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35962GTKWaveEPSS 1.48%

    Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This

  • 7.8 High severity

    GTKWave: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35961GTKWaveEPSS 1.48%

    Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This

  • 7.8 High severity

    GTKWave: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35960GTKWaveEPSS 1.48%

    Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This

  • 7.8 High severity

    GTKWave: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-35959GTKWaveEPSS 1.48%

    Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-35958GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger t

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-35957GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger t

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-35956GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger t

  • 7.8 High severity

    GTKWave: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-35955GTKWave

    Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger t

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-35704GTKWave

    Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilit

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-35703GTKWave

    Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilit

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-35702GTKWave

    Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilit

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-35128GTKWave

    An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerabilit

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-35057GTKWave

    An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerabil

  • 7.8 High severity

    GTKWave: Integer Overflow or Wraparound

    CVE-2023-35004GTKWave

    An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

  • 7.8 High severity

    GTKWave: Out-of-bounds Write

    CVE-2023-34436GTKWave

    An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.