CVE-2023-38648 | GTKWave 3.3.115 VZT vzt_rd_get_facname out-of-bounds write (TALOS-2023-1813)

CVE-2023-38648 | GTKWave 3.3.115 VZT vzt_rd_get_facname out-of-bounds write (TALOS-2023-1813)

A vulnerability, which was classified as critical, was found in GTKWave 3.3.115. Affected is the function vzt_rd_get_facname of the component VZT Handler. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2023-38648. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.