Out of Bounds Write Vulnerability in Solid Edge by Siemens

CVE-2020-28382

Summary

A vulnerability has been discovered in Solid Edge applications that stems from insufficient validation of user-supplied data during the parsing of PAR files. This deficiency can lead to an out-of-bounds write, which occurs when data is written past the memory allocated for a specific structure. Consequently, an attacker could exploit this vulnerability to execute arbitrary code within the current process context, potentially resulting in unauthorized actions or access to sensitive information.

References