Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-3785-1 | gtkwave security update |
 Debian DSA |
DSA-5653-1 | gtkwave security update |
 EUVD |
EUVD-2023-41318 | Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 05 Nov 2025 04:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 23 May 2025 00:15:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2025-11-04T18:15:29.926Z
Reserved: 2023-07-05T17:29:56.318Z
Link: CVE-2023-37418
Vulnrichment
Updated: 2024-08-02T17:16:29.444Z
NVD
Status : Modified
Published: 2024-01-08T15:15:15.767
Modified: 2025-11-04T19:15:48.247
Link: CVE-2023-37418
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses