EUVD-2026-21666
GHSA-x955-p5cf-56m4
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PDSPRJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25718.
AnalysisAI
Out-of-bounds write during PDSPRJ file parsing in Labcenter Electronics Proteus enables remote code execution when users open malicious project files. Attackers exploit insufficient input validation to write beyond allocated buffer boundaries, executing arbitrary code with victim's privileges. Requires user interaction (opening crafted PDSPRJ file). CWE-787 memory corruption vulnerability. No public exploit identified at time of analysis.
Technical ContextAI
Heap/stack buffer overflow (CWE-787) triggered during PDSPRJ project file deserialization. Parser fails to validate user-controlled data fields before memory writes, enabling controlled overwrite of adjacent memory regions. Local attack vector (AV:L) requiring file system access to malicious PDSPRJ payload.
RemediationAI
No vendor-released patch identified at time of analysis. Consult Labcenter Electronics official security advisories and product update channels for forthcoming fixes. Immediate mitigations: restrict PDSPRJ file sources to trusted origins only, disable automatic file preview/rendering in Windows Explorer, implement application whitelisting to block unauthorized Proteus execution, deploy endpoint detection monitoring for abnormal Proteus process behavior. Review ZDI advisory for additional technical indicators: https://www.zerodayinitiative.com/advisories/ZDI-26-255/. Organizations should prohibit opening PDSPRJ files from unverified email attachments or untrusted network shares until patched version confirmed available.
An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x an
Out-of-bounds write in Labcenter Electronics Proteus PDSPRJ file parser enables unauthenticated remote code execution wh
Out-of-bounds write in Labcenter Electronics Proteus PDSPRJ file parser enables unauthenticated remote code execution wi
Type confusion in Labcenter Electronics Proteus PDSPRJ file parser enables remote code execution when users open malicio
An XML Entity Expansion (XEE) issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x throu
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today