{"id":35641,"date":"2025-05-06T13:23:26","date_gmt":"2025-05-06T13:23:26","guid":{"rendered":""},"modified":"2025-05-12T00:19:25","modified_gmt":"2025-05-12T00:19:25","slug":"cve-2023-35996-arbitrary-code-execution-vulnerability-in-gtkwave-3-3-115","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-35996-arbitrary-code-execution-vulnerability-in-gtkwave-3-3-115\/","title":{"rendered":"CVE-2023-35996: Arbitrary Code Execution Vulnerability in GTKWave 3.3.115<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity world is facing yet another challenge with the discovery of a new vulnerability that affects the popular waveform viewer, GTKWave. Codenamed CVE-2023-35996, this vulnerability exploits weaknesses in the array index validation of the software, specifically in its fstReaderIterBlocks2 tdelta functionality. This vulnerability has the potential to permit arbitrary code execution<\/a>, which poses a significant threat to system security and data integrity.
\nAffected users and organizations need to be aware of the implications of this vulnerability. It allows an attacker to manipulate the execution of an application, potentially leading to system<\/a> compromise and data leakage. As such, understanding its intricacies and mitigating its risks are paramount.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2023-35996
\nSeverity: High (7.8 CVSS v3 Score)
\nAttack Vector: File
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: System compromise<\/a>, potential data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n