A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.1.252), Parasolid V36.0 (All versions < V36.0.198), Solid Edge SE2023 (All versions < V223.0 Update 11), Solid Edge SE2024 (All versions < V224.0 Update 3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted files containing XT format. This could allow an attacker to execute code in the context of the current process.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Parasolid V35.0
Vendor
Siemens
Product
Parasolid V35.0
Platforms
Unknown
Default status
unknown
Parasolid V35.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V35.0.263
Unavailable
None listed
Parasolid V35.1
Vendor
Siemens
Product
Parasolid V35.1
Platforms
Unknown
Default status
unknown
Parasolid V35.1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V35.1.252
Unavailable
None listed
Parasolid V36.0
Vendor
Siemens
Product
Parasolid V36.0
Platforms
Unknown
Default status
unknown
Parasolid V36.0 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V36.0.198
Unavailable
None listed
Solid Edge SE2023
Vendor
Siemens
Product
Solid Edge SE2023
Platforms
Unknown
Default status
unknown
Solid Edge SE2023 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V223.0 Update 11
Unavailable
None listed
Solid Edge SE2024
Vendor
Siemens
Product
Solid Edge SE2024
Platforms
Unknown
Default status
unknown
Solid Edge SE2024 · Scoped product and version facts