Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the right shift operation.
Advisories
Source ID Title
Debian DLA Debian DLA DLA-3785-1 gtkwave security update
Debian DSA Debian DSA DSA-5653-1 gtkwave security update
EUVD EUVD EUVD-2023-43138 Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the right shift operation.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 05 Nov 2025 04:30:00 +0900


Wed, 18 Jun 2025 06:15:00 +0900

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published:

Updated: 2025-11-04T18:16:31.202Z

Reserved: 2023-07-31T20:09:53.192Z

Link: CVE-2023-39414

cve-icon Vulnrichment

Updated: 2024-08-02T18:10:20.882Z

cve-icon NVD

Status : Modified

Published: 2024-01-08T15:15:24.710

Modified: 2025-11-04T19:15:54.630

Link: CVE-2023-39414

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses