Threats tagged 'ghsa-qgxv-c8r7-mwww'

xschem versions 2.9.9 through 3.4.7 contain an out-of-bounds read vulnerability in the read_xschem_file() function within src/save.c. This flaw occurs when processing embedded-symbol records that lack a preceding instance, allowing crafted schematic files starting with a "[" record to cause memory reads below the instance array and crash the application.