{"id":"CVE-2026-64629","aliases":["EUVD-2026-56124","GHSA-3rv9-35j4-r85x"],"status":"published","title":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38...","description":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38.1 (All versions \u003c V38.1.230), Simcenter Femap (All versions \u003c V2606.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.","severity":{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00155,"percentile":0.04678,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2026-08-11T12:20:29Z","modified":"2026-11-10T11:30:36Z","products":[{"vendor":"siemens","product":"parasolid v38.0"},{"vendor":"siemens","product":"parasolid v38.1"},{"vendor":"siemens","product":"simcenter femap"}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-138516.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-105852.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64629"},{"url":"https://github.com/advisories/GHSA-3rv9-35j4-r85x"}],"sources":{"cve":[{"id":"CVE-2026-64629","description":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38.1 (All versions \u003c V38.1.230), Simcenter Femap (All versions \u003c V2606.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2026-08-11T12:20:29.453Z","modified":"2026-11-10T11:30:36.327Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-10T12:38:31.627777Z"}],"euvd":[{"id":"EUVD-2026-56124","description":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38.1 (All versions \u003c V38.1.230), Simcenter Femap (All versions \u003c V2606.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2026-08-11T12:20:29Z","modified":"2026-11-10T11:30:36Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-10T12:20:52.279403Z"}],"ghsa":[{"id":"GHSA-3rv9-35j4-r85x","title":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38...","description":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38.1 (All versions \u003c V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2026-08-11T15:32:37Z","modified":"2026-11-10T12:32:49Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-10T12:54:11.217132Z"}],"nvd":[{"id":"CVE-2026-64629","description":"A vulnerability has been identified in Parasolid V38.0 (All versions \u003c V38.0.235), Parasolid V38.1 (All versions \u003c V38.1.230), Simcenter Femap (All versions \u003c V2606.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.","status":"published","published":"2026-08-11T13:19:01.56Z","modified":"2026-11-10T12:17:20.69Z","cvss":[{"version":"4.0","score":7.3,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-10T14:19:26.500913Z"}]}}