Parasolid V38 1
Monthly
Out-of-bounds read in Siemens Parasolid V38.0 and V38.1 allows code execution when a user opens a specially crafted X_T geometry file. The flaw (CWE-125) resides in the X_T file parser and can result in arbitrary code executing within the context of the host process - typically a CAD or PLM application embedding the Parasolid kernel. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; the CVSS 4.0 score of 7.3 reflects the local attack vector and passive user interaction requirement that constrain opportunistic exploitation.
Out-of-bounds read in Siemens Parasolid V38.0 and V38.1 allows code execution when a user opens a specially crafted X_T geometry file. The flaw (CWE-125) resides in the X_T file parser and can result in arbitrary code executing within the context of the host process - typically a CAD or PLM application embedding the Parasolid kernel. No public exploit or active exploitation (CISA KEV) has been identified at time of analysis; the CVSS 4.0 score of 7.3 reflects the local attack vector and passive user interaction requirement that constrain opportunistic exploitation.