CVE-2023-39413

HIGH

GTKWave 3.3.115 - Integer Underflow in LXT2 Radix Shift Operation

Title source: llm
STIX 2.1

Description

Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the left shift operation.

References (3)

Core 3

Scores

CVSS v3 7.0
EPSS 0.0038
EPSS Percentile 29.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-191
Status published
Products (1)
tonybybell/gtkwave 3.3.115
Published Jan 08, 2024
Tracked Since Feb 18, 2026