Arbitrary Code Execution

2024-04-0122:04:38

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

code execution

signal_lens

software

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

23.1%

JSON

gtkwave is vulnerable to Arbitrary Code Execution. The vulnerability arises from a specially crafted .fst file, allowing for arbitrary code execution upon opening the file. This vulnerability specifically relates to the tdelta indexing when signal_lens is 1.