CVE-2023-39272: 
NixOS vulnerability analysis and mitigation

Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. The vulnerability specifically concerns the integer overflow when allocating the lsb array. A specially crafted .lxt2 file can lead to arbitrary code execution, requiring a victim to open a malicious file to trigger these vulnerabilities (Talos).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 HIGH with vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The issue occurs in the LXT2 facgeometry parsing functionality where the size for the lsb array allocation may wrap around, leading to an out-of-bounds write. The vulnerability is classified as CWE-190 (Integer Overflow or Wraparound) (Talos, NVD).

If successfully exploited, this vulnerability can lead to arbitrary code execution. The out-of-bounds writes on heap can be used to overwrite pointers inside lt, which can in turn be used to write to arbitrary locations (Talos).

The vulnerability has been fixed in GTKWave version 3.3.118. Users are recommended to upgrade to this or a later version. The fix has been included in various distribution updates, including Debian 10 buster version 3.3.98+really3.3.118-0+deb10u1 (Debian LTS).