Which versions of Siemens Parasolid are affected by CVE-2026-64629?

Siemens Parasolid versions 38.0 and 38.1 contain a code execution vulnerability triggered when users open specially crafted CAD files; no public exploit identified at time of analysis, but the…

How to fix or mitigate CVE-2026-64629?

Within 24 hours: Conduct asset inventory of all systems running Siemens Parasolid V38.0 or V38.1 (typically CAD and PLM workstations); notify affected users of the risk and file handling restrictions. Within 7 days: Implement compensating controls including user training on file source verification, network-based file scanning for suspect geometry files, and consideration of application sandboxing or air-gapped review environments for untrusted CAD files; confirm Siemens support engagement status. Within 30 days: Pursue upgrade path to Parasolid versions beyond V38.1 if available; establish a monitoring dashboard for vendor security advisories; document all system owners and prepare communications for potential patch release.

Siemens Parasolid CVE-2026-64629

Q: What is the CVSS score of CVE-2026-64629?

CVE-2026-64629 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-56124 HIGH

Out-of-bounds Read (CWE-125)

2026-08-11 siemens

GHSA-3rv9-35j4-r85x

Buffer Overflow Information Disclosure Siemens Parasolid V38 0 Parasolid V38 1

7.3

CVSS 4.0 · Vendor: siemens

Severity by source

Vendor (siemens) PRIMARY

7.3 HIGH

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local file-open attack vector; attacker controls crafted X_T file so complexity is low; user must open the file (UI:R); no scope change; full triad impact on the host process.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (siemens).

CVSS VectorVendor: siemens

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Updated

Aug 11, 2026 - 13:31 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 11, 2026 - 13:22 vuln.today

cvss_changed

CVSS changed

Aug 11, 2026 - 13:22 NVD

7.8 (HIGH) 7.3 (HIGH)

Analysis Generated

Aug 11, 2026 - 13:10 vuln.today

CVE Published

Aug 11, 2026 - 12:20 cve.org

HIGH 7.8

DescriptionCVE.org

A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

AnalysisAI

Out-of-bounds read in Siemens Parasolid V38.0 and V38.1 allows code execution when a user opens a specially crafted X_T geometry file. The flaw (CWE-125) resides in the X_T file parser and can result in arbitrary code executing within the context of the host process - typically a CAD or PLM application embedding the Parasolid kernel. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; the CVSS 4.0 score of 7.3 reflects the local attack vector and passive user interaction requirement that constrain opportunistic exploitation.

Technical ContextAI

Parasolid is Siemens' commercial 3D geometric modeling kernel (CPE: cpe:2.3:a:siemens:parasolid_v38.0 and cpe:2.3:a:siemens:parasolid_v38.1) embedded in a wide range of CAD and PLM tools including Siemens NX, Solid Edge, and third-party applications licensed to use the kernel. X_T is the Parasolid text-based geometry file format used to exchange 3D models. CWE-125 (Out-of-Bounds Read) indicates the parser reads beyond the bounds of an allocated buffer when processing malformed X_T geometry data, which can expose adjacent memory content (information disclosure) and, depending on heap layout, corrupt control flow data enabling code execution in the process hosting the kernel. The CVSS 4.0 vector of AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H confirms all impact is scoped to the vulnerable system with no lateral subsequent-system impact.

RemediationAI

Upgrade Parasolid V38.0 to V38.0.235 or later, and Parasolid V38.1 to V38.1.230 or later, per the Siemens Product CERT advisory SSA-138516 (https://cert-portal.siemens.com/productcert/html/ssa-138516.html). For applications embedding Parasolid, apply the vendor-supplied update that incorporates the fixed kernel version; consult your CAD/PLM vendor for a specific product update schedule. As a compensating control where immediate patching is not feasible, restrict users from opening X_T files received from untrusted external sources - enforce this via email attachment filtering and DLP policies to quarantine .x_t files from unknown senders. Note that blocking X_T file exchange may disrupt engineering collaboration workflows. Additionally, run CAD applications under least-privilege user accounts to limit the blast radius of any successful code execution attempt; this does not prevent exploitation but contains lateral movement.