deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-35970
Published: 2024-01-08
Description: Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the chain_table of the `FST_BL_VCDATA_DYN_ALIAS2` section type.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1789; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-35989
Published: 2024-01-08
Description: An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1822; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-35992
Published: 2024-01-08
Description: An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1790; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-35994
Published: 2024-01-08
Description: Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta initialization part.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-35995
Published: 2024-01-08
Description: Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-35996
Published: 2024-01-08
Description: Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 0.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-35997
Published: 2024-01-08
Description: Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 2 or more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-129
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-36746
Published: 2024-01-08
Description: Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when parsing the time table.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1793; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-36747
Published: 2024-01-08
Description: Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when `beg_time` does not match the start of the time table.
CVSS Score: 7.0 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1793; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-36861
Published: 2024-01-08
Description: An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1811; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-36864
Published: 2024-01-08
Description: An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1797; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-36915
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the allocation of the `chain_table` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1798; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-36916
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the allocation of the `chain_table_lengths` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1798; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37282
Published: 2024-01-08
Description: An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1810; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37416
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's legacy VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37417
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's interactive VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37418
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37419
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt2 conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37420
Published: 2024-01-08
Description: Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37442
Published: 2024-01-08
Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's default VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37443
Published: 2024-01-08
Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's legacy VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37444
Published: 2024-01-08
Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's interactive VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37445
Published: 2024-01-08
Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37446
Published: 2024-01-08
Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt2 conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37447
Published: 2024-01-08
Description: Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37573
Published: 2024-01-08
Description: Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the GUI's recoder (default) VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37574
Published: 2024-01-08
Description: Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the GUI's legacy VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37575
Published: 2024-01-08
Description: Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the GUI's interactive VCD parsing code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37576
Published: 2024-01-08
Description: Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2vzt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37577
Published: 2024-01-08
Description: Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2lxt2 conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37578
Published: 2024-01-08
Description: Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2lxt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37921
Published: 2024-01-08
Description: Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2vzt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-118
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1807; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37922
Published: 2024-01-08
Description: Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2lxt2 conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-118
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1807; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-37923
Published: 2024-01-08
Description: Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2lxt conversion utility.
CVSS Score: 7.8 (HIGH)
CWE: CWE-118
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1807; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38583
Published: 2024-01-08
Description: A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1827; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html
CVE: CVE-2023-38618
Published: 2024-01-08
Description: Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `rows` array.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812; https://lists.debian.org/debian-lts-announce/2024/04/msg00007.html