CVE-2023-38653

Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is zero.

• CWE-190
• CWE-190

• https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1815

Published

Jan 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38648Multiple out-of-bounds write vulnerabilities exist in the VZ…7.8
• CVE-2023-38649Multiple out-of-bounds write vulnerabilities exist in the VZ…7.8
• CVE-2023-3865In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-38650Multiple integer overflow vulnerabilities exist in the VZT v…7.8
• CVE-2023-38651Multiple integer overflow vulnerabilities exist in the VZT v…7.8
• CVE-2023-38652Multiple integer overflow vulnerabilities exist in the VZT v…7.8
• CVE-2023-38654Improper input validation for some some Intel(R) PROSet/Wire…8.2
• CVE-2023-38655Improper buffer restrictions in firmware for some Intel(R) A…6.9
• CVE-2023-38657An out-of-bounds write vulnerability exists in the LXT2 zlib…7.8
• CVE-2023-3866In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-38665Null pointer dereference in ieee_write_file in nasm 2.16rc0 …5.5
• CVE-2023-38666Bento4 v1.6.0-639 was discovered to contain a segmentation v…5.5