CVE-2023-37417

Multiple out-of-bounds write vulnerabilities exist in the VCD
parse_valuechange portdump functionality of GTKWave 3.3.115. A specially
crafted .vcd file can lead to arbitrary code execution. A victim would need
to open a malicious file to trigger these vulnerabilities.This
vulnerability concerns the out-of-bounds write when triggered via the GUI’s
interactive VCD parsing code.