Multiple out-of-bounds write vulnerabilities exist in the...
High severity
Unreviewed
Published
Jan 8, 2024
to the GitHub Advisory Database
•
Updated Apr 9, 2024
Description
Published by the National Vulnerability Database
Jan 8, 2024
Published to the GitHub Advisory Database
Jan 8, 2024
Last updated
Apr 9, 2024
Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when looping over
lt->num_time_ticks.References