CVE-2023-37921

Name of the Vulnerable Software and Affected Versions GTKWave version 3.3.115

Description The issue is related to multiple arbitrary write vulnerabilities in the VCD sorted bsearch functionality. A specially crafted .vcd file can lead to arbitrary code execution when opened by a victim. This can be triggered via the vcd2vzt conversion utility.

Recommendations For GTKWave version 3.3.115, avoid opening untrusted .vcd files until a fix is available. As a temporary workaround, consider disabling the vcd2vzt conversion utility to minimize the risk of exploitation.