CVE-2023-37922 - CVE House
Back to Database
Status published High CVE-2023-37922

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch...

Vulnerability Description

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2lxt2 conversion utility.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-37922

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Discovered by Claudio Bozzato of Cisco Talos.

References

More from GTKWave

View All →
CVE-2023-39444
Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality...
High 7.8
CVE-2023-39443
Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality...
High 7.8
CVE-2023-39414
Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift...
High 7
CVE-2023-39413
Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift...
High 7
CVE-2023-39317
Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality...
High 7.8

Affected Vendor

Affected Software

GTKWave
Vulnerable Versions:
3.3.115

Timeline

Official Publish: January 8th, 2024
Last Modified: November 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-118

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.