Vulnerability CVE-2023-36746


Published: 2024-01-08

Description:
Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when parsing the time table.

 References:
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1793
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1793

Copyright 2026, cxsecurity.com

 

Back to Top