Out-Of-Bounds Write Remote Code Execution Vulnerability in Labcenter Electronics Proteus
CVE-2026-5493

7.8HIGH

Key Information:

Vendor

Labcenter Electronics

Status
Proteus
Vendor
CVE Published:
11 April 2026

What is CVE-2026-5493?

A vulnerability exists in Labcenter Electronics Proteus due to inadequate validation of user-supplied data during the parsing of PDSPRJ files. This flaw enables remote attackers to exploit the vulnerability by enticing users to visit malicious web pages or open compromised files. Successfully leveraging this vulnerability can result in arbitrary code execution within the context of the affected process, posing significant security risks to users of the product. Proper precautions should be taken to mitigate the potential impact of this exploit.

Affected Version(s)

Proteus 8.17 SP5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-255/
x_research-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.