Ecosystem	Package	Version

Vulnerabilities

CVE-2023-34087

CVE-2023-34087

An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

Published Nov 6, 2025

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1716

CVSS ScoreHigh

7.8

Ecosystem	Package	Version


rpm	gtkwave	3.1.12-1.el4
rpm	gtkwave	3.1.12-1.el5
rpm	gtkwave	3.3.104-2.el8
rpm	gtkwave	3.3.104-2.epel8.playground
rpm	gtkwave	3.3.111-1.el9
rpm	gtkwave	3.3.118-1.el7
rpm	gtkwave	3.3.118-1.el8
rpm	gtkwave	3.3.118-1.el9
rpm	gtkwave	3.3.121-6.el10_0
rpm	gtkwave	3.3.121-6.el10_1
rpm	gtkwave	3.3.25-1.el6
rpm	gtkwave	3.3.61-1.el7
rpm	gtkwave-debuginfo	3.1.12-1.el4
rpm	gtkwave-debuginfo	3.1.12-1.el5
rpm	gtkwave-debuginfo	3.3.104-2.el8
rpm	gtkwave-debuginfo	3.3.104-2.epel8.playground
rpm	gtkwave-debuginfo	3.3.111-1.el9
rpm	gtkwave-debuginfo	3.3.118-1.el7
rpm	gtkwave-debuginfo	3.3.118-1.el8
rpm	gtkwave-debuginfo	3.3.118-1.el9
rpm	gtkwave-debuginfo	3.3.121-6.el10_0
rpm	gtkwave-debuginfo	3.3.121-6.el10_1
rpm	gtkwave-debuginfo	3.3.25-1.el6
rpm	gtkwave-debuginfo	3.3.61-1.el7
rpm	gtkwave-debugsource	3.3.104-2.el8
rpm	gtkwave-debugsource	3.3.104-2.epel8.playground
rpm	gtkwave-debugsource	3.3.111-1.el9
rpm	gtkwave-debugsource	3.3.118-1.el8
rpm	gtkwave-debugsource	3.3.118-1.el9
rpm	gtkwave-debugsource	3.3.121-6.el10_0
rpm	gtkwave-debugsource	3.3.121-6.el10_1

CVE-2023-34087 | Components Impacted | Sonatype Guide | Sonatype Guide