CVE-2026-64629
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.
Risk Assessment
An attacker can execute malicious code on the victim's machine, potentially leading to system compromise or data theft.
Recommendation
Upgrade Parasolid to a patched version (V38.0.235 or later for V38.0, V38.1.230 or later for V38.1) and avoid opening untrusted X_T files.
Original NVD description (English source)
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.