CVE-2023-37442

Name of the Vulnerable Software and Affected Versions GTKWave version 3.3.115

Description The issue is related to out-of-bounds read vulnerabilities in the VCD var definition section functionality. A specially crafted .vcd file can lead to arbitrary code execution when opened by a victim, triggering the vulnerability through the GUI's default VCD parsing code.

Recommendations For GTKWave version 3.3.115, consider avoiding the use of the VCD var definition section functionality until a patch is available. As a temporary workaround, restrict the opening of .vcd files from untrusted sources to minimize the risk of exploitation.