Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mf7c-gj3r-c59v

Опубликовано: 08 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the copy function fstFread.

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the copy function fstFread.

EPSS

Процентиль: 26%
0.00092
Низкий

7.8 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 2 лет назад

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the copy function `fstFread`.

CVSS3: 7.8
nvd
около 2 лет назад

Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the copy function `fstFread`.

CVSS3: 7.8
debian
около 2 лет назад

Multiple heap-based buffer overflow vulnerabilities exist in the fstRe ...

EPSS

Процентиль: 26%
0.00092
Низкий

7.8 High

CVSS3

Дефекты

CWE-119