Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's interactive VCD parsing code.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Tonybybell |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-3785-1 | gtkwave security update |
 Debian DSA |
DSA-5653-1 | gtkwave security update |
 EUVD |
EUVD-2023-41344 | Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's interactive VCD parsing code. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 04 Nov 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Tue, 17 Jun 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2025-11-04T18:15:36.008Z
Reserved: 2023-07-05T20:42:14.033Z
Link: CVE-2023-37444
Vulnrichment
Updated: 2024-08-02T17:16:30.591Z
NVD
Status : Modified
Published: 2024-01-08T15:15:16.700
Modified: 2025-11-04T19:15:49.110
Link: CVE-2023-37444
Redhat
No data.
OpenCVE Enrichment
No data.