gtkwave vulnerabilities and fixes

Recent CVEs affecting gtkwave, with upgrade or downgrade steps. 82 tracked.

gtkwave has 82 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-01-08. Highest priority: CVE-2023-35964 (score 51/100).

• CVE-2023-39444 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115
• CVE-2023-39443 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115
• CVE-2023-39414 HIGH 7.0 DOWNGRADE Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality
• CVE-2023-39413 HIGH 7.0 DOWNGRADE Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality
• CVE-2023-39317 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115
• CVE-2023-39316 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115
• CVE-2023-39275 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.1
• CVE-2023-39274 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.1
• CVE-2023-39273 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.1
• CVE-2023-39272 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.1
• CVE-2023-39271 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.1
• CVE-2023-39270 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.1
• CVE-2023-39235 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of G
• CVE-2023-39234 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of G
• CVE-2023-38657 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.
• CVE-2023-38653 HIGH 7.0 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality
• CVE-2023-38652 HIGH 7.0 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality
• CVE-2023-38651 HIGH 7.0 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality
• CVE-2023-38650 HIGH 7.0 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality
• CVE-2023-38649 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality o
• CVE-2023-38648 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality o
• CVE-2023-38623 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.11
• CVE-2023-38622 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.11
• CVE-2023-38621 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.11
• CVE-2023-38620 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.11
• CVE-2023-38619 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.11
• CVE-2023-38618 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.11
• CVE-2023-38583 HIGH 7.8 DOWNGRADE A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKW
• CVE-2023-37923 HIGH 7.8 DOWNGRADE Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115
• CVE-2023-37922 HIGH 7.8 DOWNGRADE Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115
• CVE-2023-37921 HIGH 7.8 DOWNGRADE Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115
• CVE-2023-37578 HIGH 7.8 DOWNGRADE Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115
• CVE-2023-37577 HIGH 7.8 DOWNGRADE Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115
• CVE-2023-37576 HIGH 7.8 DOWNGRADE Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115
• CVE-2023-37575 HIGH 7.8 DOWNGRADE Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115
• CVE-2023-37574 HIGH 7.8 DOWNGRADE Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115
• CVE-2023-37573 HIGH 7.8 DOWNGRADE Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115
• CVE-2023-37447 HIGH 7.8 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3
• CVE-2023-37446 HIGH 7.8 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3
• CVE-2023-37445 HIGH 7.8 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3
• CVE-2023-37444 HIGH 7.8 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3
• CVE-2023-37443 HIGH 7.8 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3
• CVE-2023-37442 HIGH 7.8 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3
• CVE-2023-37420 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKW
• CVE-2023-37419 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKW
• CVE-2023-37418 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKW
• CVE-2023-37417 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKW
• CVE-2023-37416 HIGH 7.8 DOWNGRADE Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKW
• CVE-2023-37282 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.
• CVE-2023-36916 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functio
• CVE-2023-36915 HIGH 7.8 DOWNGRADE Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functio
• CVE-2023-36864 HIGH 7.8 DOWNGRADE An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation function
• CVE-2023-36861 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115
• CVE-2023-36747 HIGH 7.0 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functional
• CVE-2023-36746 HIGH 7.0 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functional
• CVE-2023-35997 HIGH 7.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionalit
• CVE-2023-35996 HIGH 7.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionalit
• CVE-2023-35995 HIGH 7.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionalit
• CVE-2023-35994 HIGH 7.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionalit
• CVE-2023-35992 HIGH 7.0 DOWNGRADE An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKW
• CVE-2023-35989 HIGH 7.8 DOWNGRADE An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115
• CVE-2023-35970 HIGH 7.8 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing func
• CVE-2023-35969 HIGH 7.8 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing func
• CVE-2023-35964 HIGH 7.8 DOWNGRADE Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115
• CVE-2023-35963 HIGH 7.8 DOWNGRADE Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115
• CVE-2023-35962 HIGH 7.8 DOWNGRADE Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115
• CVE-2023-35961 HIGH 7.8 DOWNGRADE Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115
• CVE-2023-35960 HIGH 7.8 DOWNGRADE Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115
• CVE-2023-35959 HIGH 7.8 DOWNGRADE Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115
• CVE-2023-35958 HIGH 7.8 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functiona
• CVE-2023-35957 HIGH 7.8 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functiona
• CVE-2023-35956 HIGH 7.8 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functiona
• CVE-2023-35955 HIGH 7.8 DOWNGRADE Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functiona
• CVE-2023-35704 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3
• CVE-2023-35703 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3
• CVE-2023-35702 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3
• CVE-2023-35128 HIGH 7.0 DOWNGRADE An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of G
• CVE-2023-35057 HIGH 7.8 DOWNGRADE An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of
• CVE-2023-35004 HIGH 7.8 DOWNGRADE An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave 3.3.
• CVE-2023-34436 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave 3.3.11
• CVE-2023-34087 HIGH 7.8 DOWNGRADE An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3
• CVE-2023-32650 HIGH 7.0 DOWNGRADE An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115

FAQ

How do I fix gtkwave vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gtkwave being exploited right now?

None of the tracked gtkwave CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gtkwave CVE should I patch first?

CVE-2023-35964 currently ranks highest (51/100): Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.

RSS feed for gtkwave · ← Back to latest CVEs