CVE-2023-35995

Vulnerability

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave version 3.3.115. The flaw specifically affects the tdelta indexing when signal_lens is 1. A specially crafted .fst file can trigger these vulnerabilities, leading to arbitrary code execution [1].

Exploitation

An attacker must create a malicious .fst file that exploits the improper array index validation. The victim needs to open this file using GTKWave, either by double-clicking on the file (as GTKWave sets up mime types for its supported extensions) or via the GUI. No authentication is required, and the attack is local (the user opens the file) [1].

Impact

Successful exploitation allows an attacker to achieve arbitrary code execution with the privileges of the victim. This can lead to full compromise of confidentiality, integrity, and availability (CIA) on the affected system [1].

Mitigation

As of the publication date (2024-01-08), no fixed version has been released. Users should avoid opening untrusted .fst files from unknown sources. The vendor has been notified, but no patch is available yet [1].