Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when `beg_time` does not match the start of the time table.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-3785-1 | gtkwave security update |
 Debian DSA |
DSA-5653-1 | gtkwave security update |
 EUVD |
EUVD-2023-40690 | Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when `beg_time` does not match the start of the time table. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 05 Nov 2025 04:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 23 May 2025 00:15:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2025-11-04T18:15:16.152Z
Reserved: 2023-06-26T21:28:46.286Z
Link: CVE-2023-36747
Vulnrichment
Updated: 2024-08-02T16:52:54.211Z
NVD
Status : Modified
Published: 2024-01-08T15:15:14.190
Modified: 2025-11-04T19:15:46.360
Link: CVE-2023-36747
Redhat
No data.
OpenCVE Enrichment
No data.