Multiple integer overflow vulnerabilities exist in the...
High severity
Unreviewed
Published
Jan 8, 2024
to the GitHub Advisory Database
•
Updated Apr 20, 2024
Description
Published by the National Vulnerability Database
Jan 8, 2024
Published to the GitHub Advisory Database
Jan 8, 2024
Last updated
Apr 20, 2024
Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the allocation of the
chain_table_lengths
array.References