CVE-2023-39413: 
NixOS vulnerability analysis and mitigation

Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. The vulnerability, identified as CVE-2023-39413, was discovered in January 2024. A specially crafted .lxt2 file can lead to memory corruption when opened by a victim (Talos, NVD).

The vulnerability occurs in the LXT2 lxt2_rd_iter_radix shift operation functionality when performing the left shift operation. The issue arises when lt->len[idx] is set to 0, causing lt->len[idx] - 1 to underflow, which leads to calling memmove with a size of -1. This results in a large copy operation that corrupts memory. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (Talos).

Due to the multi-threaded nature of GTKWave, this vulnerability could potentially lead to arbitrary code execution. The memory corruption resulting from the integer underflow could allow an attacker to execute malicious code on the targeted system (Talos).

The vulnerability has been fixed in GTKWave version 3.3.118. Users are advised to upgrade to this version or later. The fix has been included in various distribution updates, including Debian's security updates DLA-3785-1 and DSA-5653-1 (Debian LTS).