CVE-2023-36747

Name	CVE-2023-36747
Description	Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when `beg_time` does not match the start of the time table.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3785-1, DSA-5653-1
Debian Bugs	1060407

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
gtkwave (PTS)	bullseye (security), bullseye	3.3.104+really3.3.118-0+deb11u1	fixed
	bookworm, bookworm (security)	3.3.118-0.1~deb12u1	fixed
	sid, trixie	3.3.121-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
gtkwave	source	buster	3.3.98+really3.3.118-0+deb10u1	DLA-3785-1
gtkwave	source	bullseye	3.3.104+really3.3.118-0+deb11u1	DSA-5653-1
gtkwave	source	bookworm	3.3.118-0.1~deb12u1	DSA-5653-1
gtkwave	source	(unstable)	3.3.118-0.1		1060407

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1793