| Package | Affected versions | Patched versions |
|---|---|---|
| gtkwave | = 3.3.115 |
Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2lxt2 conversion utility.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free