CVE-2023-37923: 
NixOS vulnerability analysis and mitigation

Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. The vulnerability (CVE-2023-37923) specifically concerns the arbitrary write when triggered via the vcd2lxt conversion utility. A victim would need to open a malicious file to trigger these vulnerabilities (Talos).

The vulnerability exists in the VCD sorted bsearch functionality and is triggered when processing specially crafted .vcd files. The issue occurs in the vcd2lxt conversion utility where the code fails to properly validate the sorted buffer before calling bsearch, leading to an arbitrary read which could be turned into an arbitrary write. The vulnerability has a CVSS v3.1 Base Score of 7.8 HIGH (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) (NVD, Talos).

If successfully exploited, this vulnerability could lead to arbitrary code execution on the targeted system. The attacker would need to convince a user to open a specially crafted malicious file to trigger the vulnerability (Talos).

The vulnerability requires local access and user interaction to exploit. An attacker would need to create a specially crafted .vcd file and convince a user to open it using the affected vcd2lxt conversion utility (Talos).

The vulnerability has been fixed in GTKWave version 3.3.118. Users are advised to upgrade to this version or later to address this security issue (Debian LTS).