CVE-2024-26275
Assigner: siemens
Published: 2024-04-09T08:34:36.604Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
affected: vendor: Siemens
product: Parasolid V35.1
versions: status: affected
version: 0
lessThan: V35.1.254
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: Parasolid V36.0
versions: status: affected
version: 0
lessThan: V36.0.207
versionType: custom
defaultStatus: unknown
vendor: Siemens
product: Parasolid V36.1
versions: status: affected
version: 0
lessThan: V36.1.147
versionType: custom
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.8
baseSeverity: HIGH
problemTypes: descriptions: cweId: CWE-125
description: CWE-125: Out-of-bounds Read
type: CWE