Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's interactive VCD parsing code.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-3785-1 | gtkwave security update |
 Debian DSA |
DSA-5653-1 | gtkwave security update |
 EUVD |
EUVD-2023-41317 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's interactive VCD parsing code. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 04 Nov 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 13 Feb 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2025-11-04T18:15:28.683Z
Reserved: 2023-07-05T17:29:56.318Z
Link: CVE-2023-37417
Vulnrichment
Updated: 2024-08-02T17:16:29.340Z
NVD
Status : Modified
Published: 2024-01-08T15:15:15.563
Modified: 2025-11-04T19:15:48.130
Link: CVE-2023-37417
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses