Integer Overflow

2024-04-0217:18:16

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

gtkwave

integer overflow

fstreaderiterblocks2

time_table

software vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

21.5%

JSON

gtkwave is vulnerable to an Integer Overflow. This vulnerability due to integer overflow via a specially crafted .fst file in the time_table tsec_nitems functionality of the fstReaderIterBlocks2 module, allows a victim would need to open the malicious file.