CVE-2023-35994

Name of the Vulnerable Software and Affected Versions GTKWave version 3.3.115

Description The issue is related to improper array index validation vulnerabilities in the fstReaderIterBlocks2 tdelta functionality. A specially crafted .fst file can lead to arbitrary code execution. To trigger the issue, a victim would need to open a malicious file. The vulnerability is specifically concerned with the tdelta initialization part.

Recommendations For GTKWave version 3.3.115, consider avoiding the use of the fstReaderIterBlocks2 tdelta functionality until a fix is available. As a temporary workaround, restrict the opening of .fst files from untrusted sources to minimize the risk of exploitation.